CVE-2026-78085

A path traversal vulnerability exists in the Gallery Image Management feature of the SP Property Joomla extension, versions prior to 4.1.4, allowing attackers to access arbitrary files on the server. This could lead to unauthorized data exposure or manipulation, posing a risk to web applications utilizing this extension. Joomla administrators and developers using affected versions should prioritize applying the available updates to mitigate potential exploitation.