What is CVE-2026-73327?

CVE-2026-73327 is a high-severity vulnerability in Joomla Joomla! Cms, classified under Path Traversal. CVSS score: 7.6/10. Published 2026-08-12.

How severe is CVE-2026-73327?

High severity. CVSS v3 base score is 7.6 out of 10.

Path Traversal in Joomla Joomla! Cms

CVE-2026-73327

Joomla 6.1.1 contains a path traversal vulnerability in the com_joomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenam…

Vulnerability class: Path Traversal (Directory Traversal)

CVSS v3 metric

CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H.

Affected products

Joomla Joomla! Cms — versions 0

Weakness classification (CWE)

CWE-22 — Path Traversal

References

disclosure@vulncheck.com (product, patch)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-73327?: CVE-2026-73327 is a high-severity vulnerability in Joomla Joomla! Cms, classified under Path Traversal. CVSS score: 7.6/10. Published 2026-08-12.
How severe is CVE-2026-73327?: High severity. CVSS v3 base score is 7.6 out of 10.