CVE-2026-73327

CVE-2026-73327 affects Joomla 6.1.1 through the com_joomlaupdate extension. A path traversal vulnerability arises during archive extraction: an attacker can supply ZIP entry names containing directory traversals (or absolute paths) to the extract.php routine, causing files to be written outside t...