Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-107129

Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in…

Risk score
50/100
CVSS
8.3 v4.0
Published
5 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is
Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 8.3 high

References

Original description

Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0

Last activity 5 Nov 2026. Patch Forecast updates every hour.