CVE-2026-61425: Balbooa.com Gridbox Extension For Joomla

Critical severity, CVSS 9.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.

Affected products

• Balbooa.com Gridbox Extension For Joomla: version 1.0.0-2.20.0.2 only

Published 2026-07-20. Last modified 2026-07-23.