Which versions of Edocman Extension For Joomla are affected by CVE-2026-57832?

EDocman, a Joomla document management extension, contains an unauthenticated SQL injection vulnerability (CVE-2026-57832, CVSS 8.7) that allows direct extraction of database contents without…

How to fix or mitigate CVE-2026-57832?

Within 24 hours: Audit all Joomla installations for EDocman presence using asset management systems or web application scanning; isolate affected instances to trusted networks only and review database access logs for anomalies. Within 7 days: Deploy Web Application Firewall (WAF) rules to block requests to the vulnerable EDocman endpoint, or disable the EDocman extension entirely if not business-critical; implement database query monitoring. Within 30 days: Establish vendor communication channel to track patch release timeline; evaluate alternative Joomla document management solutions; perform full database integrity audit to detect unauthorized access.

Edocman Extension For Joomla CVE-2026-57832

Q: What is the CVSS score of CVE-2026-57832?

CVE-2026-57832 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-44600 HIGH

SQL Injection (CWE-89)

2026-07-15 Joomla

GHSA-96p8-29r9-pwjw

SQLi Edocman Extension For Joomla

8.7

CVSS 4.0 · Vendor: Joomla

Severity by source

Vendor (Joomla) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (Joomla) · only source for this CVE.

CVSS VectorVendor: Joomla

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 15, 2026 - 08:45 vuln.today

CVE Published

Jul 15, 2026 - 08:09 cve.org

HIGH 8.7

DescriptionCVE.org

The Joomla extension EDocman is vulnerable to an unauthenticated SQL injection.

AnalysisAI

SQL injection in EDocman, the Joomla download/document manager extension by Joomdonation, allows remote unauthenticated attackers to inject arbitrary SQL through the extension's request handling (CWE-89). The CVSS 4.0 score of 8.7 reflects high confidentiality impact with no required privileges or user interaction, meaning database contents can be extracted directly over the network. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours: Audit all Joomla installations for EDocman presence using asset management systems or web application scanning; isolate affected instances to trusted networks only and review database access logs for anomalies. …

Threat intelligence, references, and detailed analysis are available after sign-in.