CVE-2026-107129

CVSS 8.3 (high) · published 2026-11-05

Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0

Weakness: CWE-22

Source: NVD CVE-2026-107129

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.