Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both inside and outside the webroot.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-07 | 2 | Disclosure2 |
| 2026-08-10 | 1 | General1 |
CVE-2026-66914 Joomla Extension - http://seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both insid… https://www.cve.org/CVERecord?id=CVE-2026-66914
Post summary
The text announces CVE-2026-66914, a path‑traversal flaw in SEBLOD that allows unauthenticated file download, providing version details but no exploit or patch information.
⚠️ Vulnerabilidades en productos Joomla ❗ CVE-2026-66914 ❗ CVE-2026-66494 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-joomla-3/ https://t.co/8uNNsLAdVv
Post summary
The tweet lists two Joomla CVEs and points to a link for more information, but provides no technical details, PoC, or evidence of exploitation.
🚨*CVE* CVE-2026-66914 Joomla Extension - http://seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both insid… https://www.cve.org/CVERecord?id=CVE-2026-66914 ----- Traducción: CVE-2… http://infoflow.cloud`
Post summary
The post announces CVE-2026-66914, detailing an unauthenticated path traversal in SEBLOD extensions and listing vulnerable versions, but provides no proof of exploit or patch information.