{"affected":[{"defaultStatus":"unaffected","product":"jDownloads extension for Joomla","source":"CNA: Joomla","vendor":"jdownloads.com","versions":[{"status":"affected","version":"1.0.0-4.1.7"}]}],"cveId":"CVE-2026-117550","cwes":["CWE-284"],"description":"Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8 -  Manipulated frontend submission parameters could bypass the intended publication and ownership rules. In particular, submissions could be published despite automatic publication being disabled, and ownership could be assigned contrary to the intended policy.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.1,"severity":"high","source":"CNA: Joomla","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1794506259629,"publishedAt":1794506259629,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://www.jdownloads.com/"}],"remediation":[],"revision":"f6f76dd54edb092a6c13cc760108d2b11596340685db5bb79771c84fc2c63ad8","sources":[{"modifiedAt":1794506259629,"name":"CNA: Joomla","retrievedAt":1794506929705,"url":"https://www.cve.org/CVERecord?id=CVE-2026-117550"}],"ssvc":null,"status":"published","title":"Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8","updatedAt":1794506929705}