Unauthenticated Path Traversal Vulnerability in SEBLOD Joomla Extension

CVE-2026-66914

What is CVE-2026-66914?

The SEBLOD Joomla Extension contains a vulnerability that allows an unauthenticated attacker to exploit path traversal weaknesses. This flaw enables unauthorized individuals to download files located both within and outside the webroot directory of the application. Due to the lack of proper authentication checks, sensitive information can be exposed, potentially leading to further exploitation of the server.

References