Known Vulnerabilities for products from Joomla
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Joomla".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102427 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-102425 json | Not Provided | 2026-09-29 | 2026-09-30 | |
| CVE-2026-102424 json | Not Provided | 2026-09-29 | 2026-09-30 | |
| CVE-2026-101127 json | Not Provided | 2026-09-29 | 2026-09-30 | |
| CVE-2026-101126 json | Not Provided | 2026-09-29 | 2026-09-30 | |
| CVE-2026-101112 json | Not Provided | 2026-09-29 | 2026-09-30 | |
| CVE-2026-101111 json | Not Provided | 2026-09-28 | 2026-09-30 | |
| CVE-2026-101110 json | Not Provided | 2026-09-28 | 2026-09-30 | |
| CVE-2026-101109 json | Not Provided | 2026-09-28 | 2026-09-30 | |
| CVE-2026-101108 json | Not Provided | 2026-09-28 | 2026-09-30 | |
| CVE-2026-73373 json | Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dang... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-73372 json | Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 ... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-73371 json | Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper acces... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-73337 json | Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient state checks lead ... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-73336 json | Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead ... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-72532 json | Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An imp... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-72531 json | Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - A... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-71574 json | Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-71573 json | Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation p... | Not Provided | 2026-08-18 | 2026-09-03 |
| CVE-2026-71572 json | Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output p... | Not Provided | 2026-08-18 | 2026-09-03 |