VulnSocial

CVE-2026-97161

LOWCVSS 9.2 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked at 2 mentions on most recent observed day (2026-09-27)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-26: 1Mentions · 2026-09-27: 209-2609-27
Referenced assets3 URLs
Full discourse3 posts
  • Rıdvan Yağlı@ridvanyagli

    🔴 Joomla eklentilerinde kritik güvenlik açıkları! Joomla ekosisteminde çok sayıda önemli / kritik güvenlik açığı yayınlandı. CVE-2026-97163 — CVSS 10.0 Critical : UP Universal Plugin — Uzaktan kod yükleme / çalıştırma CVE-2026-97160 — CVSS 9.4 Critical : UP Universal Plugin — PHP command injection CVE-2026-97161 — CVSS 9.2 Critical : UP Universal Plugin — Path Traversal / yetkisiz dosya erişimi CVE-2026-94132 — CVSS 9.5 Critical : AcyMailing Enterprise < 11.1.0 — RCE CVE-2026-94131 — CVSS 8.3 High : AcyMailing Enterprise < 11.1.0 — Yetkisiz dosya silme 📌 UP Universal Plugin: Etkilenen sürümler için UP 6.1.0 / eski Joomla serileri için 5.2.1 sürümüne güncellenmesi öneriliyor. 📌 AcyMailing Enterprise: 11.1.0 veya üzeri sürüme güncellenmeli. ⚠️ Sunucularınızdaki Joomla eklentilerini ve sürümlerini kontrol edin.

    00073473
    2.4K followersView on X
  • mürrez@murrezsec

    New vulnerability analysis &amp; PoC live! 🔍 Deep dive into CVE-2026-97161 mechanics, details, and mitigation: 💻 https://pocbit.org/pocs/cve-2026-97161 Feedback and reviews are always welcome. #VulnerabilityResearch #CyberSecurity #RedTeam #Exploit

    0001078
    607 followersView on X
  • CVE@CVEnew

    CVE-2026-97161 Joomla Extension - https://lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 https://www.cve.org/CVERecord?id=CVE-2026-97161

    00000436
    58.1K followersView on X

Explore more

Back to dashboard