CVE-2026-97163: lomart up

CVSS 10.0 (critical) · published 2026-09-26

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Affected products (NVD): lomart up

Weakness: CWE-22, CWE-284

Source: NVD CVE-2026-97163

References

• https://up.lomart.fr/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.