JoomGallery 4.4.2 Safety Release

JoomGallery 4.4.2 Security Release

This update fixes a critical security vulnerability that has existed since the introduction of JoomGallery 4.x. We strongly recommend installing this update as soon as possible!

About the Security Update

On 12 September 2026, Yugorin of the Samar Group (https://retroportal.org) responsibly disclosed a serious security vulnerability in JoomGallery. The vulnerability is tracked as CVE-2026-84048.

This vulnerability has been fixed in JoomGallery version 4.4.2. We recommend that all administrators running an affected installation update to version 4.4.2 or later as soon as possible.

How serious is the risk to my gallery?

We consider this vulnerability to pose a high risk. It can be exploited on any JoomGallery installation, regardless of how the gallery has been set up or configured.

CVE-2026-84048 – Unauthenticated Upload of Arbitrary Files

The vulnerability allows arbitrary files to be uploaded to the server without authentication via an internal endpoint, by accessing a specific URL. These files are stored on the server as unspecified data together with a .info file. On inadequately secured or configured servers, these files may also be executable, which in the worst case could result in the server being compromised.

Uploaded files are stored in the configured Joomla! temp directory and may look like this:

• aabbccddeeff00112233445566778899
• aabbccddeeff00112233445566778899.info

Summary for Administrators

• Affected: All JoomGallery versions from 4.0.0 up to and including 4.4.1
• Fixed in: JoomGallery 4.4.2 and later
• CVE: CVE-2026-84048
• Risk rating: Medium to high
• Attack prerequisite: JoomGallery is installed and enabled
• Potential impact: Unauthorised file uploads
• System compromise possible: Yes, on inadequately secured servers
• Recommended action: Update to JoomGallery 4.4.2 or later and then inspect the Joomla! temp directory.

See GitHub for the Complete Changelog

Download Now

Download JoomGallery 4.4.2 directly HERE.

Language packs are also available.

Migration from JoomGallery 3.x is supported. Full information about the migration process can be found in the migration guide.