CVE-2026-97163
CVE-2026-97163
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Weakness classification (CWE)
Public proof-of-concept exploits
References
- up.lomart.fr/ (product)
Frequently asked questions
- What is CVE-2026-97163?
- CVE-2026-97163 is a vulnerability, classified under Path Traversal. Published 2026-09-26.
- Is CVE-2026-97163 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.