Read the docs

Techfry

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Techfry records in CISA KEV

No Techfry vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tf Content 2 records LOW

Records

2 records in Tf Content · all components

TI-2026-67755 CVE-2026-102779 · GHSA-hqjq-hvr2-rrg3

Missing authorization in TF Content for Joomla lets guests run automation tasks

Priority LOW 36

Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site task `records.custom_action` without authentication, ACL, CSR…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00259 Published 2026-10-05 No fix listed CWE-862
TI-2026-67750 CVE-2026-102780 · GHSA-5q6m-pwqm-wmc9

Missing authorization in TF Content for Joomla lets guests edit data

Priority LOW 36

Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public `RecordContro…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0029 Published 2026-10-05 No fix listed CWE-862
Open these records in search →