Critical severity · published Jul 20, 2026
CVE-2026-61425
Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0
9.4
CVSS
0.6%
EPSS
No
On KEV
Description
Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GE
Gridbox extension for Joomla · balbooa.com
1.0.0-2.20.0.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-61425
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-61425
mysites.guru
https://mysites.guru/blog/gridbox-critical-authentication-bypass/
www.balbooa.com
https://www.balbooa.com/gridbox
More from Gridbox extension for Joomla
9.8
CVE-2026-65888
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2
9.8
CVE-2026-65887
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2
9.8
CVE-2026-65890
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2
9.8
CVE-2026-65884
Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2
9.3
CVE-2026-102788
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2