Articles
Newsflash
13 Oct 2026 Business and Enterprise Solutions
Joomla: CSRF in image upload in Event Gallery

In Event Gallery component for Joomla versions 6.5.0 and earlier a medium severity vulnerability CVE-2026-100747 was detected. This vulnerability allows a third-party site to upload files to an event and overwrite existing files. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100747.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: CSRF Vulnerability in Event Gallery

In Event Gallery component for Joomla versions earlier than 6.5.0 a medium severity vulnerability CVE-2026-100748 was detected. This vulnerability allows attackers to perform cross-site request forgery attacks. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100748.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: Cross-Site Request Forgery (CSRF) Vulnerability in Event Gallery

In Event Gallery component for Joomla versions 6.5.0 and earlier a medium severity vulnerability CVE-2026-100749 was detected. This vulnerability allows an attacker to perform unintended backend cleanup actions via a crafted request. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100749.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: Authenticated arbitrary path deletion in Event Gallery extension

In Event Gallery extension component for Joomla versions 6.5.0 and earlier a high severity vulnerability CVE-2026-97164 was detected. This vulnerability allows an authenticated attacker to recursively delete arbitrary directories. To address this issue, users should upgrade Event Gallery extension to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97164.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: Reflected XSS and Open Redirect Vulnerability in Event Gallery

In Event Gallery component for Joomla versions earlier than 6.5.0 a medium severity vulnerability CVE-2026-97165 was detected. This vulnerability allows attackers to execute Reflected Cross-Site Scripting (XSS) and perform open redirects. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97165.

Read more
CMS
12 Oct 2026 Project and Agile Management
Ansible: Authorization Bypass in Automation Platform Gateway

In affected versions of the Ansible Automation Platform (AAP) gateway a medium severity vulnerability CVE-2026-94416 was detected. This vulnerability allows an authenticated administrator to create a new service key for the Controller service cluster. To address this issue, users should upgrade Ansible to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-94416.

Read more
IT Business Management
Case Studies