https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:16:19.263894+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-joomla-2026-40384 BIT-joomla-2026-40384 — Joomla! Core - [20260510] - Path traversal in com_media webservice endpoint 2026-10-04T16:16:19.320540+00:00

Affected: Bitnami: joomla

An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0649 certfr-2026-avi-0649 — De multiples vulnérabilités ont été découvertes dans Joomla!. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-04T16:16:19.320596+00:00 certfr-2026-avi-0649 https://cve.radiocsirt.org/vuln/euvd-2026-321604 EUVD-2026-321604 2026-10-04T16:16:19.320617+00:00 EUVD-2026-321604 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40384 fkie_cve-2026-40384 2026-10-04T16:16:19.320629+00:00

An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-hr66-rv65-f5r4 GHSA-hr66-rv65-f5r4 2026-10-04T16:16:19.320650+00:00

An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1688 WID-SEC-W-2026-1688 — Joomla: Mehrere Schwachstellen 2026-10-04T16:16:19.320664+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Joomla ausnutzen, um Angriffe wie Cross-Site Scripting (XSS), SQL-Injection, Privilegienerweiterung, Umgehung der Authentifizierung, Path Traversal, Local File Inclusion (LFI) und unbefugten Zugriff durchzuführen.