CVE-2026-66492

The Phoca Commander extension for Joomla versions 1.0.0 to 6.1.3 is vulnerable to a path traversal issue that allows attackers to manipulate file upload paths, potentially leading to unauthorized file access on the server. Organizations using this extension should prioritize patching or mitigating this vulnerability to prevent potential data exposure or system compromise. This is particularly relevant for web administrators and developers managing Joomla sites with the affected extension.