CVE-2026-65884

Critical · 9.8

CVSS

9.8

EPSS

0.5%

Published

Jul 29, 2026

CISA due date

—

The record

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions.

Affected packages

Ecosystem	Package	Introduced	Fixed