What is GHSA-c26x-8grc-xmfm?

GHSA-c26x-8grc-xmfm is a security advisory published by GitHub Security Advisories with High severity. Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads \u003c 4.1.8...

Which CVE IDs does GHSA-c26x-8grc-xmfm cover?

GHSA-c26x-8grc-xmfm covers the following CVE IDs: CVE-2026-117544. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-c26x-8grc-xmfmHigh

Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8...

Vendor

GitHub Security Advisories

Published

November 12, 2026

Last Modified

November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-117544 →

📋 Description

Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8 - The other_file_id parameter could reference another download’s file without fully enforcing the target download’s access restrictions. This allowed files to be delivered to users who were not authorised to access the target download.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-117544
https://www.jdownloads.com
https://github.com/advisories/GHSA-c26x-8grc-xmfm