CVE-2026-65886

The Joomla Extension from balbooa.com, specifically Gridbox versions prior to 2.20.2, is vulnerable to unauthenticated arbitrary file reading, enabling attackers to access sensitive files on the server. This exposure could lead to data leakage or further exploitation of the system. Joomla administrators and users of the Gridbox extension should prioritize updating to the latest version to mitigate this risk.