CVE-2026-76570

Summary

The flaw is an unauthenticated SQL injection vulnerability in the Joomla Extension joomcode.com, specifically in the JCTables 1.21.1 version, allowing attackers to execute arbitrary SQL queries and potentially read or write data without proper authentication.

Exploitability

Exploitation is relatively easy due to the lack of Joomla token validation and authentication checks. An attacker needs to manipulate request parameters to inject SQL queries.

Blast radius

If exploited, the vulnerability could lead to data theft or corruption, as the attacker can execute arbitrary SQL commands on the database.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to JCTables 2.590 or later, as the fixed version is mentioned in the description.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.