CVE-2026-117551

Published 12 November 2026 · tracked since 13 November 2026

Description

Joomla Extension - jdownloads.com - RCE through file upload in jDownloads < 4.1.8 - Insufficient validation of frontend thumbnail uploads allowed users with upload permission to place executable files on the server. This results in PHP code execution.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-126477 MEDIUM 4.8
• CVE-2026-126472 HIGH 8.8
• CVE-2026-126471 MEDIUM 6.5
• CVE-2026-126469 HIGH 8.8
• CVE-2026-126468 HIGH 8.8
• CVE-2026-126466 HIGH 8.8
• CVE-2026-126465 MEDIUM 6.5
• CVE-2026-126462 MEDIUM 5.4
• CVE-2026-126461 MEDIUM 6.5
• CVE-2026-126460 HIGH 7.1

→ Open the live CVE board · all tools