MINI-H498-GRPW-2M86

Bulletin has no description...

MINI-R7J4-3356-J68Q

Bulletin has no description...

MINI-5JQ2-38C2-2HFV

Bulletin has no description...

MINI-5PF8-JGMR-3RWH

Bulletin has no description...

MINI-M668-MQ62-XRF6

Bulletin has no description...

MINI-JJXX-93MQ-MXQ2

Bulletin has no description...

MINI-H9WV-MJ9Q-47P4

Bulletin has no description...

MINI-WPFV-W5CF-QVXQ

Bulletin has no description...

MINI-CG6R-MQ8W-7VFM

Bulletin has no description...

MINI-4G8C-XHHQ-FQ7R

Bulletin has no description...

MINI-W56R-6XV5-R5WV

Bulletin has no description...

MINI-HGCJ-9MQH-6FQJ

Bulletin has no description...

CVE-2026-73389

Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...

CVE-2026-67364

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the...

EUVD-2026-62397

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the...

CVE-2026-67364

Balbooa Forms for Joomla (versions

CVE-2026-67364 Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the...

CVE-2026-67364 Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the...

EUVD-2026-62375

Unauthenticated Remote Code Execution RCE in JetEngine = 3.8.14 versions...

CVE-2026-66613

JetEngine plugin ≤ 3.8.14 allows unauthenticated remote code execution. CVSS 9.8 (CRITICAL). PatchStack documented it. No exploitation evidence or fixed version provided in documents. Upgrade to latest plugin version as precautionary measure. Monitor vendor announcements for official patch release.