CVE-2026-65765 MEDIUM

CVE-2026-65765: Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1

Vendor Phoca.cz
Product Phoca Commander extension for Joomla
Weakness CWE-22 · Path traversal
Published July 27, 2026
Last update July 27, 2026
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

What the vulnerability does

01Description

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities.

Explanation of Vulnerability in Simple Terms

02Summary

Phoca Commander for Joomla contains a path traversal vulnerability that allows an attacker with high-level privileges to read files outside the intended directory. The vulnerability requires network access and high administrative privileges. Site administrators should update to a patched version when available.

What an attacker can do

03Attacker Capabilities

Read files outside the intended directory on the server.

Potential impact on your site

04Site Impact

An admin account could be compromised to access sensitive files like configuration or database backups.

Conditions required to exploit

05Prerequisites

Attacker must have high-level administrative privileges and network access to the Joomla site.

Key dates

06Disclosure timeline

July 27, 2026 CVE published
July 27, 2026 Record updated

Related vulnerabilities

08Related CVE

CVE-2026-13369 Ninja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter CVE-2026-9145 Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value' CVE-2026-57696 WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability CVE-2026-9282 W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' Parameter CVE-2017-20248 WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download