Advisories · Technology

phoca.cz Phoca Commander extension for Joomla.

Every CVE that names phoca.cz Phoca Commander extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66491 CVE record

CVSS 8.2 High

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3
- phoca.cz Phoca Commander extension for Joomla
- Path traversal
Not analysed yet 7 Aug 2026
CVE-2026-66492 CVE record

CVSS 6.1 Medium

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3
- phoca.cz Phoca Commander extension for Joomla
- Path traversal
Not analysed yet 7 Aug 2026
CVE-2026-66493 CVE record

CVSS 6.4 Medium

Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3
- phoca.cz Phoca Commander extension for Joomla
- Path traversal
Not analysed yet 7 Aug 2026
CVE-2026-65765 CVE record

CVSS 6.9 Medium

Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1
- phoca.cz Phoca Commander extension for Joomla
- Path traversal
Not analysed yet 27 Jul 2026
CVE-2026-65764 CVE record

CVSS 5.1 Medium

Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.1.1
- phoca.cz Phoca Commander extension for Joomla
- Cross-site scripting (XSS)
Not analysed yet 27 Jul 2026