{"affected":[{"defaultStatus":"unaffected","packageName":"com_gridbox","product":"Gridbox extension for Joomla","source":"CNA: Joomla","vendor":"balbooa.com","versions":[{"status":"affected","version":"1.0.0-2.20.4.2"}]}],"cveId":"CVE-2026-107129","cwes":["CWE-22"],"description":"Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.3,"severity":"high","source":"CNA: Joomla","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L","version":"4.0"},{"score":5.5,"severity":"medium","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L","version":"3.1"}],"modifiedAt":1793905969149,"publishedAt":1793901485153,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://www.balbooa.com/gridbox"}],"remediation":[],"revision":"49927539aab06e70ec0159ede605c5151bcd9cab5a969f6f1e76791e42205502","sources":[{"modifiedAt":1793905969149,"name":"CNA: Joomla","retrievedAt":1793909554882,"url":"https://www.cve.org/CVERecord?id=CVE-2026-107129"}],"ssvc":{"assessedAt":1793905964729,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0","updatedAt":1793909554882}