CVE-2026-61900

The DJ-jDownloads extension for Joomla versions prior to 4.1.6 is susceptible to an unauthenticated arbitrary file upload vulnerability, allowing attackers to execute remote code on the server. This poses a significant risk to any Joomla installations using this extension, as it could lead to complete system compromise. Joomla administrators and web developers utilizing this extension should prioritize immediate updates to mitigate potential exploitation.