Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-65887 |
|
Vulnerability in balbooa (CVE-2026-65887)
vulnerability in balbooa (CVE-2026-65887). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65888 |
|
Vulnerability in balbooa (CVE-2026-65888)
vulnerability in balbooa (CVE-2026-65888). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65947 |
|
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
|
| CVE-2026-65886 |
|
Path Traversal in balbooa (CVE-2026-65886)
path traversal in balbooa (CVE-2026-65886). Confidential information can be exposed externally.
|
| CVE-2026-66488 |
|
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
|
| CVE-2026-66489 |
|
Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
|
| CVE-2026-66490 |
|
Cross-Site Scripting (XSS) in balbooa (CVE-2026-66490)
cross-site scripting in balbooa (CVE-2026-66490). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65889 |
|
Path Traversal in balbooa (CVE-2026-65889)
path traversal in balbooa (CVE-2026-65889). Data can be tampered with by attackers.
|
| CVE-2026-65890 |
|
SQL Injection in sqli (CVE-2026-65890)
SQL injection in sqli (CVE-2026-65890). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65884 |
|
Vulnerability in privilege-escalation (CVE-2026-65884)
vulnerability in privilege-escalation (CVE-2026-65884). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65885 |
|
Unrestricted File Upload in balbooa (CVE-2026-65885)
vulnerability in balbooa (CVE-2026-65885). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56291 KEV |
|
[KEV] Unrestricted File Upload in Balbooa forms (CVE-2026-56291)
vulnerability in Balbooa forms (CVE-2026-56291). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|