Known Vulnerabilities for products from Joomla
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Joomla".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102784 json | Not Provided | 2026-10-08 | 2026-10-08 | |
| CVE-2026-102783 json | Not Provided | 2026-10-08 | 2026-10-08 | |
| CVE-2026-102782 json | Not Provided | 2026-10-07 | 2026-10-07 | |
| CVE-2026-102781 json | Not Provided | 2026-10-07 | 2026-10-07 | |
| CVE-2026-102780 json | Not Provided | 2026-10-05 | 2026-10-05 | |
| CVE-2026-102779 json | Not Provided | 2026-10-05 | 2026-10-06 | |
| CVE-2026-102778 json | Not Provided | 2026-10-05 | 2026-10-06 | |
| CVE-2026-102777 json | Not Provided | 2026-10-05 | 2026-10-06 | |
| CVE-2026-102776 json | Not Provided | 2026-10-05 | 2026-10-05 | |
| CVE-2026-102775 json | Not Provided | 2026-10-05 | 2026-10-05 | |
| CVE-2026-92232 json | Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92231 json | Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92227 json | Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - ... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92226 json | Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - ... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92225 json | Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The module list layout did not pro... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92224 json | Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout di... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92223 json | Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An imp... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92222 json | Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - URLs used for... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-90918 json | Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The mail template feature ... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-90917 json | Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An im... | Not Provided | 2026-09-29 | 2026-10-06 |