CVE-2026-66489

Description

References

• mysites.guru/blog/gridbox-23-critical-vulnerabilities · Third Party Advisory
• balbooa.com/gridbox · Product

gridbox 的其他漏洞

• CVE-2026-65947高危 7.3Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
• CVE-2026-65888严重 9.8Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any g…
• CVE-2026-65887严重 9.8Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to re…
• CVE-2026-65886高危 7.5Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers…
• CVE-2026-66490中危 6.1Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2