CVE-2026-97163

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Published Sep 26, 2026
CVSS 10.0 critical
0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

lomart.fr UP plugin for Joomla

CVE-2026-97163 at the National Vulnerability Database