CVE-2026-97161

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

  • Published Sep 26, 2026
  • CVSS 9.2 critical
  • 0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-97161 at the National Vulnerability Database