← Back

Download

download

Vendor: Phoca • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-57828
1Phoca
1Download
Jul 14, 2026
Jul 11, 2026
9.0 CRITICAL· v4
8.8 HIGH· v3
N/A· v2
The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.