Path Traversal Vulnerability in Phoca Commander by Joomla Extension

CVE-2026-66493

What is CVE-2026-66493?

A Path Traversal vulnerability in Phoca Commander allows attackers to manipulate file paths during delete, copy, and move actions. This can lead to unauthorized access to sensitive files outside the intended directory, potentially exposing user data or system files. The improper limitation of paths creates a significant security risk for installations using affected versions of the extension.

References