Security Advisory

CVE-2026-66491

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-07 08:06:01
Last updated 2026-08-07 15:15:29
Assigner Joomla
CVSS score not scored
State PUBLISHED

Description

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability.