Vulnerability Bulletins |
CVE-2026-117542 |
|
| Affected software | JOOMLA |
| Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A manipulated `update_file` form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-117542 | |