Dashboard / CVE-2026-117550

CVE-2026-117550

HIGH
MEDIUM Priority: 0.02 BB Relevance: 64/100
Published: 2026-11-12 Modified: 2026-11-13 First seen: 2026-11-12 Status: active

Attack Surface

Network Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
AT: None
VC: None
VI: High
VA: None

Description

Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8 - Manipulated frontend submission parameters could bypass the intended publication and ownership rules. In particular, submissions could be published despite automatic publication being disabled, and ownership could be assigned contrary to the intended policy.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
jdownloads.com jDownloads extension for Joomla 1.0.0-4.1.7
jdownloads.com jDownloads extension for Joomla 1.0.0-4.1.7
jdownloads.com jDownloads extension for Joomla 1.0.0-4.1.7

References & Advisories (1)

Bug Bounty Relevance

64 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.30%
Raw Score 0.002960
Percentile 22.6%
Date 2026-11-13

Intelligence Sources

mitre ref →
nvd ref →

External Links