Quick answers
- Is CVE-2026-57832 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-57832 being exploited in the wild.
- How severe is CVE-2026-57832?
- Informational severity, with a CVSS score of 8.7, published 15 July 2026.
- Which products and versions are affected?
- Joom Donation EDocman 1.0-3.8.
- Is there a fix for CVE-2026-57832?
- A patch was published on 2026-07-14: Version 3.9 released to address the vulnerability. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-57832 attacked?
- It is attacked over the network, in a software library.
- Am I affected by CVE-2026-57832?
- Check whether you run Joom Donation EDocman at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A SQL injection vulnerability (CWE-89) exists in the EDocman extension for Joomla, affecting versions 1.0 through 3.8. The flaw allows an unauthenticated remote attacker to send specially crafted requests to the application, bypassing input sanitization to execute arbitrary SQL commands against the backend database. Successful exploitation could lead to the unauthorized disclosure of sensitive information, such as user credentials or configuration data. The issue is addressed in version 3.9, released on July 14, 2026.
Affected products
- joomdonation.com EDocman extension for Joomla 1.0-3.8
Timeline
- 2026-07-14: patched: Version 3.9 released to address the vulnerability.
- 2026-07-15: disclosed: CVE-2026-57832 published.