Vulnerability Bulletins

CVE-2026-117544

   
Affected software JOOMLA
 
Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8 - The `other_file_id` parameter could reference another download’s file without fully enforcing the target download’s access restrictions. This allowed files to be delivered to users who were not authorised to access the target download.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-117544