CVE-2026-66916
Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is protected with a password, the HTML view correctly enforces the password gate - but the JSON view ( format=json ) skips this check entirely.
| CWE | CWE-284 |
| Vendor | joomgalleryfriends.net |
| Product | joomgallery extension for joomla |
| Published | Aug 22, 2026 |
| Last Updated | Aug 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for joomgalleryfriends.net joomgallery extension for joomla
Be the first to know when new unknown vulnerabilities affecting joomgalleryfriends.net joomgallery extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
joomgalleryfriends.net / JoomGallery extension for Joomla
4.0.0-4.3.0
Credits
Toan Le