Insecure Direct Object Reference Vulnerability in jDownloads by Joomla

CVE-2026-117544

What is CVE-2026-117544?

The jDownloads extension for Joomla has a vulnerability that permits unauthorized file downloads due to insufficient access control checks on the 'other_file_id' parameter. Users can exploit this flaw to access files intended for restricted use, undermining the security of sensitive data. This issue is particularly concerning for sites that rely on proper access governance for downloaded materials, as it exposes them to potential data breaches.

References