← Database

CVE-2026-40384

HIGH CVSS: 7.5 Published: 2026-05-26 Modified: 2026-07-24

Description

An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

Affected Platforms

Joomla Joomla\!

Weakness Type

CWE-22

References