Known Vulnerabilities for products from Joomla
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Joomla".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-118494 json | Not Provided | 2026-11-05 | 2026-11-05 | |
| CVE-2026-115452 json | Not Provided | 2026-11-05 | 2026-11-06 | |
| CVE-2026-115451 json | Not Provided | 2026-11-05 | 2026-11-06 | |
| CVE-2026-107903 json | Not Provided | 2026-11-05 | 2026-11-06 | |
| CVE-2026-107130 json | Not Provided | 2026-11-05 | 2026-11-06 | |
| CVE-2026-107129 json | Not Provided | 2026-11-05 | 2026-11-06 | |
| CVE-2026-105607 json | Not Provided | 2026-11-05 | 2026-11-06 | |
| CVE-2026-105606 json | Not Provided | 2026-11-02 | 2026-11-02 | |
| CVE-2026-105605 json | Not Provided | 2026-11-02 | 2026-11-02 | |
| CVE-2026-105604 json | Not Provided | 2026-11-02 | 2026-11-02 | |
| CVE-2026-92232 json | Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92231 json | Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92227 json | Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - ... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92226 json | Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - ... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92225 json | Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The module list layout did not pro... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92224 json | Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout di... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92223 json | Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An imp... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-92222 json | Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - URLs used for... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-90918 json | Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The mail template feature ... | Not Provided | 2026-09-29 | 2026-10-06 |
| CVE-2026-90917 json | Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An im... | Not Provided | 2026-09-29 | 2026-10-06 |