Vulnerability Description
Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitrary file uploads, however neither file name nor file extension are under attacker control. Code execution requires non-standard server configuration.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-84048?
CVE-2026-84048 is a documented vulnerability. Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitrary file uploads, however neither file nam...
How severe is CVE-2026-84048?
CVSS scoring is not yet available for CVE-2026-84048. Check NVD for updates.
Is there a patch for CVE-2026-84048?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.