PT-2026-29506 · Joomla · Joomla! Cms

Thành Nguyễn · Published 2026-04-01 · Updated 2026-04-01 · CVE-2026-23899

Mitre

CVSS v4.0

8.6

High

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

An improper access check allows unauthorized access to webservice endpoints.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-23899

Affected Products

Joomla! Cms

References · 2

• https://developer.joomla.org/security-centre/1032-20260306-core-improper-access-check-in-webservice-endpoints.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23899 · Security Note