CVE-2026-65887
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 0.25%
- 16th pct
- KEV
- No
- Class
- other
- CWE-284, NVD-CWE-noinfo
Description
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to reset any user password, allowing to login and act as these users - excluding super admins.
References
Status: profiled · ingested 2026-08-05T18:00:56.000Z