Dashboard / CVE-2026-73373

CVE-2026-73373

HIGH
MEDIUM Priority: 0.06 BB Relevance: 63/100
Published: 2026-08-18 Modified: 2026-10-22 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: X
AT: Present
VC: High
VI: High
VA: High

Description

Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers that executed these files, that could lead to code execution.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
joomla joomla\! 1.0.0 – 5.4.8

References & Advisories (2)

Bug Bounty Relevance

63 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

8.9 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.65%
Raw Score 0.006490
Percentile 51.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00649
2026-10-28
0.00649

Intelligence Sources

nvd ref →

External Links