Login Request a demo
GR
Product
Gridbox
by Balbooa · last CVE Jul 29, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 4High 4Medium 4Low 0
Severity
All severities12Critical4High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Gridbox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-65888
9.8
1%
Jul 29
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2026-65887
9.8
1%
Jul 29
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2026-65890
9.8
1%
Jul 29
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2026-65884
9.8
1%
Jul 29
Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2026-65885
8.8
1%
Jul 29
Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2026-65886
7.5
1%
Jul 29
Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2026-65889
7.5
0%
Jul 29
Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2026-65947
7.3
0%
Jul 29
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2026-66490
6.1
0%
Jul 29
Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2018-11690
6.1
33%
Jun 14
The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input
Affected: through 2.4.0
CVE-2026-66489
5.3
0%
Jul 29
Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2026-66488
5.3
0%
Jul 29
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
Affected: before 2.20.2
Showing 12