PT-2026-56229 · Unknown · Joomla! Cms

Warisjeet Singh · Published 2026-07-07 · Updated 2026-07-07 · CVE-2026-48956

Positive Technologies (AI Summary)

CVSS v4.0

6.4

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Joomla! CMS versions 4.0.0 through 5.4.6 Joomla! CMS versions 6.0.0 through 6.1.1

Description Improper access control in the com modules component allows users to display a list of modules in the frontend that they should not be able to see.

Recommendations Update Joomla! CMS versions 4.0.0 through 5.4.6 to version 5.4.7. Update Joomla! CMS versions 6.0.0 through 6.1.1 to version 6.1.2.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-48956

Affected Products

Joomla! Cms

References · 3

• https://developer.joomla.org/security-centre/1064-20260710-core-incorrect-access-control-in-com-modules.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48956 · Security Note
• https://twitter.com/sin99xx/status/2074547650091794603 · Twitter Post