NetSight
medium6.9

CVE-2026-67283

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-…

Impact

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on every file managed within the extension.

Affected products

ProductAffected versions
Cotton Cloud
before 2.0.2

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References