CVSS 9.4 (critical) · published 2026-09-26
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
Affected products (NVD): lomart up
Weakness: CWE-94
Source: NVD CVE-2026-97160
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.