CVE-2026-102789 in Gridbox ExtensionИнформация

Сводка

по VulDB • 27.10.2026

Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and invokes getBlogPosts(). Unlike other tasks in this controller, it omits the GridboxHelper::checkUserEditLevel() check.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

Joomla

Резервировать

29.09.2026

Раскрытие

27.10.2026

Модерация

принято

Вход

VDB-427083

EPSS

0.00000

KEV

Нет

Деятельности

Низкий

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-102789
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-102789
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-102789/

◂ ПредыдущийОбзорДалее ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!