Vulnerability Bulletins

CVE-2026-117551

   
Affected software JOOMLA
 
Joomla Extension - jdownloads.com - RCE through file upload in jDownloads < 4.1.8 - Insufficient validation of frontend thumbnail uploads allowed users with upload permission to place executable files on the server. This results in PHP code execution.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-117551