CVE-2026-76611

The Joomla extension from yootheme.com is vulnerable to unauthenticated arbitrary directory listing through the Gallery element in versions prior to 4.1.66. This flaw could allow attackers to access sensitive directory contents without authentication, potentially exposing critical information. Joomla administrators and users of the affected extension should prioritize updating to the latest version to mitigate this risk.