{"vulnerability": "CVE-2026-97161", "sightings": [{"uuid": "92c5898f-250f-488d-81ac-7a1102ffdbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7nnf2p2r", "content": "\ud83d\udea8 CVE-2026-97161 \u2014 CVSS 9.2 CRITICAL\n\nJoomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97161\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:30.653247Z"}, {"uuid": "0928943f-ce16-484a-a714-a35a8649acc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gk33f3nb27y54", "content": "CVE-2026-97161 - Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97161\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr -...", "creation_timestamp": "2026-09-26T16:49:06.492595Z"}, {"uuid": "dcb43201-5939-482c-a6c4-ac9ef5dcc490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103469", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97161\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:50:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97161 PoC: Joomla UP (lomart.fr) unauthenticated path traversal / arbitrary file read via ajax-view (\u22646.0.29). Fingerprints plugin, probes configuration.php. Fix: UP 6.1.0 / 5.2.1. https://pocbit.org/pocs/cve-2026-97161\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:00:09.000000Z"}, {"uuid": "b7cc6290-84a7-4754-befe-8f176833e07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy2kuu32u", "content": "CVE-2026-97161 - up plugin for joomla\nThe UP plugin versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29 can be tricked into reading or writing files outside its intended folder. This could let an attacker view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lomartfr #CVE #infosec", "creation_timestamp": "2026-09-26T22:20:05.091660Z"}, {"uuid": "1359c928-b6ca-49b9-9a65-7ea6b5bc6187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2olp6w2l", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97161: Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 9.2\nhttps://beta.vulnsea.com/cve/CVE-2026-97161\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:38.284761Z"}]}