CVE-2026-65888

Analyzed Analyzed - Analysis Complete

Account takeover in Joomla Gridbox extension

Publication date: 2026-07-29

Last updated on: 2026-08-05

Assigner: Joomla! Project

Description

Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any given user on the target site.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-29

Last Modified

2026-08-05

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-65888

Affected Vendors & Products

Vendor	Product	Version / Range
balbooa	gridbox	to 2.20.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is an account takeover flaw in the Joomla extension Gridbox versions before 2.20.2. It exists in the socialLogin method, which allows attackers to log in as any user on the affected site without authentication.

Detection Guidance

Check if your Joomla site uses Gridbox version 2.20.2 or earlier. Inspect the socialLogin method in the extension for improper user authentication. Review server logs for unusual login attempts or unauthorized access patterns.

Impact Analysis

Attackers can gain full control of user accounts, access sensitive data, perform unauthorized actions, or take over the entire website. The CVSS score of 10.0 indicates maximum severity with no privileges required for exploitation.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data, violating GDPR and HIPAA requirements for data protection and access controls. Organizations may face fines and legal consequences for non-compliance.

Mitigation Strategies

Update Gridbox to version 2.20.2 or later immediately. Disable the socialLogin method if not required. Implement strict access controls and monitor for suspicious login activities.

Hi! I’m here to help you understand CVE-2026-65888. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70