Netskope Threat Labs

INDICATOR-COMPROMISE Joomla Balbooa Forms webshell access attempt

IPS-NPA

1 SID: 66856

Detects indicators of compromise consistent with an active intrusion using Joomla Balbooa Forms webshell access attempt. The underlying flaw carries the identifier CVE-2026-56291.