CVE-2026-88856
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGallery(), reached via task=update_osgallery, read a JSON request body and called the value of a method field as a live PHP function, passing the value of a package field as its single argument, with no allow-list or is_callable() check of any kind. Any function name compatible with a single argument was directly reachable, including system, exec, shell_exec, and passthru.
| CWE | CWE-94 |
| Vendor | ordasoft.com |
| Product | ordasoft joomla gallery free extension for joomla |
| Published | Sep 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for ordasoft.com ordasoft joomla gallery free extension for joomla
Be the first to know when new unknown vulnerabilities affecting ordasoft.com ordasoft joomla gallery free extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
OrdaSoft.com / OrdaSoft Joomla Gallery free extension for Joomla
1.0.0-6.2.6
OrdaSoft.com / OrdaSoft Joomla Gallery extension for Joomla
1.0.0-6.2.6
Credits
Ala Arfaoui