[ CVE-2026-102785 · Published 22 Oct 2026 ]
Vulnerability in yootheme.com YOOtheme Pro extension for Joomla
CVSS 10.0
No fix listed yet
[ Why it matters ]Priority signals
- Critical severity: CVSS 10.0
[ Description ]Official description
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote attacker can reuse a signature disclosed in a legitimate public image URL, inject additional image operations, traverse out of the intended cache directory, and write an attacker-controlled PNG/PHP polyglot to an executable public media directory.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.