CVE-2026-67283 — Joomla Extension - tabaoca.org - Improper ACL implementation allows allow file operations in Cotton Cloud < 2.0.2

CVE-2026-67283

Joomla Extension - tabaoca.org - Improper ACL implementation allows allow file operations in Cotton Cloud < 2.0.2 PUBLISHED

Description (CNA)

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on every file managed within the extension.

Affected (CNA)

Vendor / product	Versions
tabaoca.org / Cotton Cloud extension for Joomla	affected 1.0.0-2.0.1

CWE

CWE-284

References

https://www.tabaoca.org/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.