CVE-2026-65884 is an improper access control vulnerability in the balbooa.com Gridbox extension for Joomla. Specifically, in versions up to and including 2.20.1, the registration method permits unauthenticated users to specify usergroup IDs during account creation. This allows attackers to escalate privileges by registering accounts with administrative rights without authentication. The vulnerability is classified under CWE-284 (Improper Access Control) and has a CVSS 4.0 score of 10, reflecting its critical impact. No official patch or remediation guidance is currently provided by the vendor, and no known exploits are reported in the wild.

Successful exploitation enables unauthenticated attackers to gain administrative privileges on affected Joomla sites using the Gridbox extension. This could lead to full system compromise, including unauthorized access, data modification, and control over the Joomla installation. The vulnerability's critical severity and ease of exploitation (no authentication required) make it a significant risk to affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the registration functionality or disable the Gridbox extension if possible. Monitor for vendor updates and apply patches promptly once released.