Remote Code Execution Vulnerability in jDownloads Extension by Joomla
CVE-2026-117551

10CRITICAL

Key Information:

Vendor

Jdownloads.com

Status
Jdownloads Extension For Joomla
Vendor
CVE Published:
12 November 2026

What is CVE-2026-117551?

The jDownloads extension for Joomla has a significant vulnerability that arises from inadequate validation of frontend thumbnail uploads. Users with upload permissions can exploit this issue to upload executable files to the server, leading to potential PHP code execution. This flaw puts systems at risk by allowing unauthorized modification and control of server functionalities, requiring immediate attention and remediation.

Affected Version(s)

jDownloads extension for Joomla 1.0.0-4.1.7

References

https://www.jdownloads.com/
product

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Fadilulah Ajeigbe
.