// CVE · PUBLISHED 2026-07-20
CVE-2026-61425 balbooa.com / Gridbox extension for Joomla
9.4 · CVSS 4.0 Critical
Description Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.
Details Products balbooa.com / Gridbox extension for Joomla Published 20 Jul 2026 Modified 24 Oct 2026 CVSS 9.4 Critical (v4.0) Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Score source security@joomla.org CWE CWE-288 Record status Deferred