Skip to main content

Geoip Extension For Joomla CVE-2026-65431

| EUVDEUVD-2026-47917 CRITICAL
Path Traversal (CWE-22)
2026-07-23 Joomla GHSA-x4cq-64pm-5635
Path Traversal Geoip Extension For Joomla
9.8
CVSS 3.1 · Vendor: Joomla
Share

Severity by source

Vendor (Joomla) PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (Joomla) · only source for this CVE.

CVSS VectorVendor: Joomla

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
Analysis Generated
Jul 27, 2026 - 17:23 vuln.today
CVSS changed
Jul 27, 2026 - 17:22 NVD
9.8 (CRITICAL)
CVE Published
Jul 23, 2026 - 09:09 cve.org
CRITICAL 9.8
CVE Published
Jul 23, 2026 - 09:09 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions.

AnalysisAI

Unsafe file extraction in the Joomla GeoIP extension (versions 1.0.0-6.3.8) enables remote code execution by writing files outside intended directories during update processing. The vulnerability (CWE-22) does not require authentication and is triggered when the extension extracts untrusted archive files. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Geoip Extension For Joomla

View all
CVE-2026-64876 HIGH
8.8 Jul 23

Unauthorized database updates can be triggered via CSRF in the GeoIP extension for Joomla, affecting versions 1.0.0 thro
CVE-2026-63265 HIGH
8.0 Jul 22

We need to produce a JSON object with all fields as plain-text strings. Input: CVE-2026-63265. Description: Privileged R
CVE-2026-65430 HIGH
7.5 Jul 23

Information disclosure in the GeoIP extension for Joomla 1.0.0 through 6.3.8 exposes MaxMind API credentials directly in
CVE-2026-64875 MEDIUM
6.5 Jul 23

GeoIP rule bypass in Joomla Geo

Same weakness CWE-22 – Path Traversal

View all
CVE-2019-3396 CRITICAL POC
9.8
CVE-2019-19781 CRITICAL POC
9.8
CVE-2020-5902 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2021-27065 HIGH POC
7.8
CVE-2019-11510 CRITICAL POC
10.0
CVE-2018-13379 CRITICAL POC
9.1
CVE-2023-47246 CRITICAL POC
9.8

Same technique Path Traversal

View all
CVE-2025-64446 CRITICAL POC
9.8
CVE-2023-47246 CRITICAL POC
9.8
CVE-2015-0016 HIGH POC
7.8
CVE-2016-0752 HIGH POC
7.5
CVE-2024-13159 CRITICAL POC
9.8
CVE-2024-13160 CRITICAL POC
9.8
CVE-2024-13161 CRITICAL POC
9.8
CVE-2014-0780 CRITICAL POC
9.8

Share

CVE-2026-65431 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy