CVE-2026-65887 — Critical vulnerability brief

Joomla Extension – balbooa.com – Unauthenticated arbitrary password reset in Gridbox < 2.20.2 – The resetPassword method allows actors to reset any user password, allowing to login and act as these users – excluding super admins.

CVSS base score: 10 / 10

View NVD record