CVE-2026-102785: CWE-434 Unrestricted Upload of File with Dangerous Type in yootheme.com YOOtheme Pro extension for Joomla

CVE-2026-102785 describes a critical vulnerability in YOOtheme Pro extension for Joomla (versions 5.0.0 to 5.0.52). The publicly accessible image transformation handler does not fully bind normalized image operations and output destinations to its request signature. This flaw allows an unauthenticated attacker to reuse a legitimate signature from a public image URL, inject additional image operations, traverse outside the intended cache directory, and write a crafted PNG/PHP polyglot file to an executable public media directory, resulting in remote code execution.

An unauthenticated remote attacker can achieve remote code execution by exploiting this vulnerability, potentially leading to full system compromise of the Joomla installation running the affected YOOtheme Pro versions. The vulnerability has a CVSS 4.0 score of 10.0, indicating critical severity with high impact on confidentiality, integrity, and availability.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict public access to the image transformation handler if possible and monitor for suspicious file uploads or modifications in the media directories.