CVE-2026-84048

UNKNOWN 0.0

Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.1

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.1 - The TUS endpoint allows arbitrary file uploads, however neither file name nor file extension are under attacker control. Code execution requires non-standard server configuration.

CWE	CWE-284
Vendor	joomgalleryfriends.net
Product	joomgallery extension for joomla
Published	Sep 15, 2026
Last Updated	Sep 15, 2026

Stay Ahead of the Next One

Get instant alerts for joomgalleryfriends.net joomgallery extension for joomla

Be the first to know when new unknown vulnerabilities affecting joomgalleryfriends.net joomgallery extension for joomla are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

joomgalleryfriends.net / JoomGallery extension for Joomla

4.0.0-4.4.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

joomgalleryfriends.net: https://www.joomgalleryfriends.net/

Credits

Yugorin of Samar Group — https://retroportal.org