CVE-2026-65765 - Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1

Back Back to CVE browser

MEDIUM

Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1

Published Jul 27, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.47%

Description

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities.

Affected products

Vendor Phoca.cz Product Phoca Commander extension for Joomla Default
unaffected
Affected
- 1.0.0-6.1.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Phoca.cz	Phoca Commander extension for Joomla	unaffected	Affected 1.0.0-6.1.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49128
Advisory
https://www.phoca.cz/phocacommander
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49128		Advisory
https://www.phoca.cz/phocacommander		product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Joomla

Published Jul 27, 2026

Updated Jul 27, 2026

Reserved Jul 22, 2026

Link CVE-2026-65765

CISA Vulnrichment

Updated Jul 27, 2026

NVD

Status Deferred

Modified Jul 27, 2026

Link CVE-2026-65765

Red Hat

No data

ENISA EUVD

Assigner Joomla

Published Jul 27, 2026

Updated Jul 27, 2026

Link EUVD-2026-49128

GitHub

No data