CVE-2026-73327: Joomla 6.1.1 Zip Slip Path Traversal via com_joomlaupdate extract.php
Published Aug 12, 2026
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the reported behavior is intentional. The update process is designed to write files to disk and is restricted to the highest-privilege users working with cryptographically verified Joomla archives.
Affected Software
1 affected component
Open Source Matters Joomla=6.1.1
Event History
Aug 12, 2026
CVE Published
via MITRE·06:05 PM
Rejected
via MITRE·06:05 PM
Data Sourced
via NVD·06:18 PM
Description
Aug 17, 2026
Rejected
via MITRE·07:15 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-73327?
CVE-2026-73327 has a severity rating of 7.6, classified as high.
2
How do I fix CVE-2026-73327?
To fix CVE-2026-73327, upgrade Joomla to the latest version that addresses this vulnerability.
3
What type of vulnerability is CVE-2026-73327?
CVE-2026-73327 is a path traversal vulnerability found in the com_joomlaupdate extension.
4
Who is affected by CVE-2026-73327?
CVE-2026-73327 affects Super Users in Joomla 6.1.1 when extracting crafted archive files.
5
What is the potential impact of CVE-2026-73327?
The potential impact of CVE-2026-73327 includes unauthorized access to sensitive files due to directory traversal attacks.