CVE-2026-66493 in Commander Extension

Riassunto

di MITRE • 07/08/2026

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: Joomla
• Prenotare: 27/07/2026
• Divulgazione: 07/08/2026
• Moderazione: accettato
• Voce: VDB-386960
• CPE: pronto
• CWE: CWE-22 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-66493
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-66493
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-66493/