Balbooa (Gridbox vendor blog)

balbooa-blog · A · candidate

https://www.balbooa.com/blog/gridbox

vendor-psirtvulnslang: enfetch failures: 0quiet periods: 0last fetch: never

Added 2026-11-08 (2026-11-08T1309Z-audit, G1 re-sweep): Balbooa's own blog, the vendor primary for the Gridbox for Joomla flaw stream (anonymous Super User flaws exploited since July 2026; 2.20.5.0 security deep dive of 2026-11-04 with affected versions, fixed version and CVE ids). Read posts with `extract`; the store had cited Balbooa only through mySites.guru. Candidate: promote after 3 contributing runs.

Cited in 2 entries

Citation cadence

Citation days per ISO week (3 weeks of coverage span, total 2).

CVE-2026-61425 and the follow-up batch, Balbooa Gridbox for Joomla: a client-supplied cookie is accepted as proof of identity, giving anonymous Super User access2026-07-26
CVE-2026-56291, Balbooa Forms for Joomla: unauthenticated file-upload RCE exploited as a zero-day (CVSS 10.0)2026-07-09