Known Vulnerabilities for products from Joomla
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Joomla".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-78374 json | Not Provided | 2026-09-10 | 2026-09-10 | |
| CVE-2026-78303 json | Not Provided | 2026-09-10 | 2026-09-10 | |
| CVE-2026-78302 json | Not Provided | 2026-09-10 | 2026-09-10 | |
| CVE-2026-78085 json | Not Provided | 2026-09-10 | 2026-09-10 | |
| CVE-2026-78084 json | Not Provided | 2026-09-10 | 2026-09-10 | |
| CVE-2026-78083 json | Not Provided | 2026-09-10 | 2026-09-10 | |
| CVE-2026-78082 json | Not Provided | 2026-09-10 | 2026-09-10 | |
| CVE-2026-78080 json | Not Provided | 2026-09-03 | 2026-09-03 | |
| CVE-2026-78079 json | Not Provided | 2026-08-31 | 2026-08-31 | |
| CVE-2026-78078 json | Not Provided | 2026-08-31 | 2026-08-31 | |
| CVE-2026-73373 json | Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dang... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-73372 json | Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 ... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-73371 json | Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper acces... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-73337 json | Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient state checks lead ... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-73336 json | Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead ... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-72532 json | Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An imp... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-72531 json | Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - A... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-71574 json | Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-71573 json | Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation p... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-71572 json | Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output p... | Not Provided | 2026-08-18 | 2026-09-03 |