ZeroDay Findings
Sign inSign up

Findings

CVE-2026-40384

An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

Published May 26, 2026 · updated Jul 24, 2026 · joomla joomla!

An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 26, 2026 · NIST NVD

    Detected

    An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

  2. Jul 24, 2026 · NIST NVD

    Updated

    An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

Affected

  • cpe joomla/joomla!version unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-40384

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-40384

    An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

    nvd.nist.gov

References