CVE-2026-67284

CVE-2026-67284 affects the Joomla extension from tabaoca.org, with an improper ACL implementation that allows authenticated users to perform file operations (read, delete, overwrite, re-assign permissions) on files owned by other users in Cotton Cloud versions older than 2.0.3. The incident is do...