PT-2026-64865 · Phoca.Cz · Phoca Commander Extension For Joomla

Revanth Meesala · CVE-2026-65765 · Published 2026-07-27 · Updated 2026-07-27

Mitre

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-65765

Affected Products

Phoca Commander Extension For Joomla

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-65765 · Security Note
• https://phoca.cz/phocacommander · Note