CVE-2026-102785

{
  "etk_id": "ETK-2026-2443",
  "cve_id": "CVE-2026-102785",
  "display_id": "CVE-2026-102785",
  "ghsa_id": "GHSA-8w8j-f6ph-29mm",
  "euvd_id": "EUVD-2026-108161",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated arbitrary file write in YOOtheme Pro for Joomla",
  "summary": "YOOtheme Pro for Joomla 5.0.0 through 5.0.52 is affected by an unauthenticated file-write flaw in its public image transformation handler. An attacker who can obtain a valid signature from a public image URL may write attacker-controlled content to an executable public media directory and achieve code execution. Exploitation depends on access to such a signature and on script execution being permitted in the destination directory.",
  "mitigation": "Disable or restrict public access to the image transformation handler, and configure the web server to prevent script execution in public media directories. Monitor the vendor's release information and upgrade to a version confirmed to address the issue when available.",
  "vendor": "yootheme.com",
  "product": "YOOtheme Pro extension for Joomla",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "5.0.0-5.0.52"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "YOOtheme Pro extension for Joomla",
      "purl": null
    }
  ],
  "cwes": [
    434
  ],
  "cvss_score": 10,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 15.040429883333333,
  "t0_at": "2026-10-22T12:36:43.196000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-22T12:36:43.196000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-22T12:36:43.196000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102785"
    }
  }
}