CVE-2026-73373
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 0.31%
- 23th pct
- KEV
- No
- Class
- other
- CWE-434
Description
Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers that executed these files, that could lead to code execution.
References
Status: profiled · ingested 2026-09-03T18:00:49.000Z