Unauthenticated Deletion Vulnerability in Gridbox by Balbooa
CVE-2026-107130

6.9MEDIUM

Key Information:

Vendor

Balbooa.com

Status
Gridbox Extension For Joomla
Vendor
CVE Published:
5 November 2026

What is CVE-2026-107130?

A vulnerability has been identified in the Gridbox extension for Joomla, allowing unauthenticated users to delete submission and field files. This issue occurs in versions earlier than 2.20.5.0 and poses a significant risk as it allows unauthorized access to sensitive files, potentially leading to data loss. Users are recommended to update to the latest version to mitigate this security risk.

Affected Version(s)

Gridbox extension for Joomla 1.0.0-2.20.4.2

References

https://www.balbooa.com/gridbox
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.