CVE-2026-61425 Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0
An authentication bypass in the Gridbox extension allows attackers to gain full administrative access to the Joomla site.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-61425?
CVE-2026-61425 is a critical authentication bypass vulnerability in balbooa.com Gridbox extension for Joomla, published on 20 Jul 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.
Weakness: CWE-288
Which versions are affected by CVE-2026-61425?
How do I fix CVE-2026-61425?
No fix has been published for CVE-2026-61425 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-61425 being exploited?
There is no known exploitation of CVE-2026-61425 in the wild and no public exploit code.
Sources
Also known as GHSA-825m-333c-p679.