{"affected":[{"defaultStatus":"unaffected","product":"jDownloads extension for Joomla","source":"CNA: Joomla","vendor":"jdownloads.com","versions":[{"status":"affected","version":"1.0.0-4.1.7"}]}],"cveId":"CVE-2026-117544","cwes":["CWE-200","CWE-639"],"description":"Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8 - The `other_file_id` parameter could reference another download’s file without fully enforcing the target download’s access restrictions. This allowed files to be delivered to users who were not authorised to access the target download.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.2,"severity":"high","source":"CNA: Joomla","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1794506861250,"publishedAt":1794506861250,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://www.jdownloads.com/"}],"remediation":[],"revision":"d2a69c9e19294c8c4325f58af0b7fd877bfb8aa123ed7abe2ad34a6be868a840","sources":[{"modifiedAt":1794506861250,"name":"CNA: Joomla","retrievedAt":1794510520217,"url":"https://www.cve.org/CVERecord?id=CVE-2026-117544"}],"ssvc":null,"status":"published","title":"Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8","updatedAt":1794510520217}