CVE-2026-65884

Unauthenticated actors can register new Joomla admin accounts via a flawed registration method in Gridbox < 2.20.2.

The Gridbox Joomla extension allows unauthenticated users to register accounts with administrative privileges by providing usergroup IDs, enabling attackers to gain full control of the site. DIB organizations must patch this immediately as it bypasses authentication entirely, leading to potential data breaches, ransomware deployment, and compliance violations under NIST 800-171. The vendor has a critical security posture with prior RCE vulnerabilities, indicating systemic negligence.

Shame score — A fundamental authentication bypass allowing unauthenticated admin account creation is a severe, avoidable failure that directly enables full site compromise and data exfiltration.