Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: balbooa Clear
ID Title
CVE-2026-65887 Vulnerability in balbooa (CVE-2026-65887)
vulnerability in balbooa (CVE-2026-65887). Successful exploitation can lead to full system takeover.
CVE-2026-65888 Vulnerability in balbooa (CVE-2026-65888)
vulnerability in balbooa (CVE-2026-65888). Successful exploitation can lead to full system takeover.
CVE-2026-65947 Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
CVE-2026-65886 Path Traversal in balbooa (CVE-2026-65886)
path traversal in balbooa (CVE-2026-65886). Confidential information can be exposed externally.
CVE-2026-66488 Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
CVE-2026-66489 Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
CVE-2026-66490 Cross-Site Scripting (XSS) in balbooa (CVE-2026-66490)
cross-site scripting in balbooa (CVE-2026-66490). Risk of unauthorized operations or information disclosure.
CVE-2026-65889 Path Traversal in balbooa (CVE-2026-65889)
path traversal in balbooa (CVE-2026-65889). Data can be tampered with by attackers.
CVE-2026-65890 SQL Injection in sqli (CVE-2026-65890)
SQL injection in sqli (CVE-2026-65890). Successful exploitation can lead to full system takeover.
CVE-2026-65884 Vulnerability in privilege-escalation (CVE-2026-65884)
vulnerability in privilege-escalation (CVE-2026-65884). Successful exploitation can lead to full system takeover.
CVE-2026-65885 Unrestricted File Upload in balbooa (CVE-2026-65885)
vulnerability in balbooa (CVE-2026-65885). Successful exploitation can lead to full system takeover.
CVE-2026-56291 KEV [KEV] Unrestricted File Upload in Balbooa forms (CVE-2026-56291)
vulnerability in Balbooa forms (CVE-2026-56291). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →