CVE-2026-66914

The SEBLOD Joomla extension versions prior to 3.30.0, 4.7.0, and 6.0.1 are vulnerable to an unauthenticated path traversal attack, allowing attackers to download arbitrary files from the server. This critical vulnerability poses a significant risk as it can expose sensitive information and system files, potentially leading to further exploitation. Joomla administrators and users of the SEBLOD extension should prioritize updating to the latest versions to mitigate this risk.