Alex Joseph
A serious security flaw has been discovered in the Balbooa Forms extension for Joomla, identified as CVE-2026-102424. This vulnerability could allow an unauthorized attacker to steal sensitive files from your server. It’s crucial for website administrators and developers using this extension to understand the risk and take immediate action to protect their sites.
The vulnerability stems from an unauthenticated path traversal weakness. This means that even without logging in, a malicious individual could manipulate how the Balbooa Forms extension handles file attachments within its auto-reply feature. By submitting a specially crafted request during a public form submission, an attacker can trick the system into attaching local server files to an auto-reply email, sending them directly to the attacker.
CVE Details
Product: Balbooa Forms for Joomla!
Published Date: September 29, 2026
Severity: High
Status: Analyzed
Affected Products
The vulnerability impacts Balbooa Forms for Joomla! versions prior to 2.4.3.4. If you are running any version older than 2.4.3.4, your website is at risk.
Current Status
This vulnerability has been analyzed, confirming the potential for unauthenticated path traversal and local file exfiltration. The severity is rated as HIGH, indicating that exploitation could lead to significant data breaches.
Severity Level
With a severity rating of HIGH, this vulnerability poses a significant threat. Successful exploitation could allow an attacker to gain access to critical server files, including configuration files (like configuration.php which often contains database credentials and other sensitive information). This could lead to a complete compromise of the Joomla website and potentially other systems on the same server, resulting in data theft, unauthorized access, and further attacks.
Possible Solutions
The most important step to secure your Joomla website is to update your Balbooa Forms extension immediately. It is strongly recommended to update to version 2.4.3.4 or a later stable release. This version is expected to contain the necessary patches to address the unauthenticated path traversal vulnerability.
- Update Balbooa Forms: Ensure your Balbooa Forms extension is updated to version 2.4.3.4 or the latest available version. Always check the official Balbooa website or your Joomla extension manager for the most recent updates.
- Regular Backups: Maintain regular backups of your website and database to ensure you can restore your site in case of a security incident.
- Monitor Logs: Regularly review your server and Joomla application logs for any suspicious activity or unauthorized file access attempts.
References
https://www.balbooa.com/
