CVE-2026-77029General

LOWCVSS 4.6 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://www.yootheme.com/

Weakness type (CWE)

CWE-352

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
General: 1 classified signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

General

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-77029

Full discourse2 posts

YOOtheme@yootheme47d
Patch
🚨 Critical security update for ZOO We fixed 4 vulnerabilities: CVE-2026-76611: Path traversal CVE-2026-76612: Cross-site scripting CVE-2026-77028: External redirects CVE-2026-77029: CSRF attacks Update ZOO immediately to 4.1.66
Post summary
A critical update (v4.1.66) has been released for ZOO, fixing four vulnerabilities—path traversal, XSS, external redirects, and CSRF—and users are urged to apply the patch promptly.
11010340
13.9K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
General
CVE-2026-77029 Joomla Zoo Extension Lacks CSRF Protection on Front-End State Changes https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-77029
Post summary
The text offers only a brief vulnerability notice with minimal technical detail and no evidence of PoC, exploit, or patch, placing it in the General category.
00001139
4.1K followersView on X

Explore more

Back to dashboard