CVE-2026-97161: lomart up

CVSS 9.2 (critical) · published 2026-09-26

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Affected products (NVD): lomart up

Weakness: CWE-22, CWE-284

Source: NVD CVE-2026-97161

References

• https://up.lomart.fr/

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.