CVE-2026-97163

The UP plugin extension for Joomla versions 5.0.0 to 5.2.0 and 6.0.0 to 6.0.29 is vulnerable to unauthenticated remote code installation, allowing attackers to execute arbitrary code on affected systems without authentication. This critical vulnerability poses a severe risk to any Joomla sites using these versions, potentially leading to complete system compromise. Joomla administrators and web developers should prioritize immediate updates or mitigations to protect their environments.