vendor1 exploited in the wild

Balbooa

9 CVEs published in the last four months. Exploited flaws first.

Critical5

High4

Medium0

Exploited (KEV)1

Patch these first

CVE	CVSS	Severity	Product	Summary	Published
CVE-2026-56291exploited	9.8	critical	forms	Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla exten	58d ago

All recent CVEs

CVE	CVSS	Severity	Product	Summary	Published
CVE-2026-56291exploited	9.8	critical	forms	Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla exten	58d ago
CVE-2026-65884	9.8	critical	gridbox	Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users p	38d ago
CVE-2026-65890	9.8	critical	gridbox	Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow u	38d ago
CVE-2026-65887	9.8	critical	gridbox	Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword	38d ago
CVE-2026-65888	9.8	critical	gridbox	Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allow	38d ago
CVE-2026-65885	8.8	high	gridbox	Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods all	38d ago
CVE-2026-65886	7.5	high	gridbox	Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows	38d ago
CVE-2026-65889	7.5	high	gridbox	Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generateNewApp method	38d ago
CVE-2026-65947	7.3	high	gridbox	Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2	38d ago

Filter the full tracker by Balbooa →