Articles
Newsflash
13 Oct 2026 Business and Enterprise Solutions
Joomla: CSRF in image upload in Event Gallery

In Event Gallery component for Joomla versions 6.5.0 and earlier a medium severity vulnerability CVE-2026-100747 was detected. This vulnerability allows a third-party site to upload files to an event and overwrite existing files. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100747.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: CSRF Vulnerability in Event Gallery

In Event Gallery component for Joomla versions earlier than 6.5.0 a medium severity vulnerability CVE-2026-100748 was detected. This vulnerability allows attackers to perform cross-site request forgery attacks. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100748.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: Cross-Site Request Forgery (CSRF) Vulnerability in Event Gallery

In Event Gallery component for Joomla versions 6.5.0 and earlier a medium severity vulnerability CVE-2026-100749 was detected. This vulnerability allows an attacker to perform unintended backend cleanup actions via a crafted request. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100749.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: Authenticated arbitrary path deletion in Event Gallery extension

In Event Gallery extension component for Joomla versions 6.5.0 and earlier a high severity vulnerability CVE-2026-97164 was detected. This vulnerability allows an authenticated attacker to recursively delete arbitrary directories. To address this issue, users should upgrade Event Gallery extension to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97164.

Read more
CMS
13 Oct 2026 Business and Enterprise Solutions
Joomla: Reflected XSS and Open Redirect Vulnerability in Event Gallery

In Event Gallery component for Joomla versions earlier than 6.5.0 a medium severity vulnerability CVE-2026-97165 was detected. This vulnerability allows attackers to execute Reflected Cross-Site Scripting (XSS) and perform open redirects. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97165.

Read more
CMS
12 Oct 2026 Infrastructure and Network
Keycloak: Improper Permission Checks in Admin REST API

In Keycloak affected versions a medium severity vulnerability CVE-2026-97311 was detected. This vulnerability allows an attacker to bypass group visibility permissions. To address this issue, users should upgrade Keycloak to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97311.

Read more
Security
Case Studies