PT-2026-65785
CVE-2026-65884
·
Published
2026-07-29
·
Updated
2026-08-05
Description by
CVSS 4.0
10
CriticalMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red
Name of the Vulnerable Software and Affected Versions
Gridbox versions prior to 2.20.2
Description
A privilege escalation issue exists in the registration method of the Gridbox extension for Joomla. This flaw allows unauthenticated actors to register new accounts with administrative permissions by providing specific usergroup IDs.
Recommendations
Update Gridbox to version 2.20.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾