MEDIUM
joomgalleryfriends.net
CVE published 2026-09-15
CVE-2026-84048
CVE-2026-84048 is a medium-severity vulnerability in the JoomGallery extension for Joomla, allowing unauthenticated arbitrary file uploads via the TUS endpoint. The vulnerability affects JoomGallery versions prior to 4.4.2. This issue is particularly concerning because it could potentially lead to code execution with non-standard server configurations. Defenders should be aware of the potential risks and [truncated]