Which versions of Edocman Extension For Joomla are affected by CVE-2026-57832?

EDocman, a Joomla document management extension, contains an unauthenticated SQL injection vulnerability (CVE-2026-57832, CVSS 8.7) that allows direct extraction of database contents without…

How to fix or mitigate CVE-2026-57832?

Within 24 hours: Audit all Joomla installations for EDocman presence using asset management systems or web application scanning; isolate affected instances to trusted networks only and review database access logs for anomalies. Within 7 days: Deploy Web Application Firewall (WAF) rules to block requests to the vulnerable EDocman endpoint, or disable the EDocman extension entirely if not business-critical; implement database query monitoring. Within 30 days: Establish vendor communication channel to track patch release timeline; evaluate alternative Joomla document management solutions; perform full database integrity audit to detect unauthorized access.

Edocman Extension For Joomla CVE-2026-57832

Q: What is the CVSS score of CVE-2026-57832?

CVE-2026-57832 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-44600 HIGH

SQL Injection (CWE-89)

2026-07-15 Joomla

GHSA-96p8-29r9-pwjw

SQLi Edocman Extension For Joomla Joomdonation Com

8.7

CVSS 4.0 · Vendor: Joomla

Severity by source

Vendor (Joomla) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (Joomla) · only source for this CVE.

CVSS VectorVendor: Joomla

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 15, 2026 - 08:45 vuln.today

CVE Published

Jul 15, 2026 - 08:09 cve.org

HIGH 8.7

DescriptionCVE.org

The Joomla extension EDocman is vulnerable to an unauthenticated SQL injection.

AnalysisAI

SQL injection in EDocman, the Joomla download/document manager extension by Joomdonation, allows remote unauthenticated attackers to inject arbitrary SQL through the extension's request handling (CWE-89). The CVSS 4.0 score of 8.7 reflects high confidentiality impact with no required privileges or user interaction, meaning database contents can be extracted directly over the network. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV; EPSS data was not provided.