Joomla · Joomla! · CVE-2026-92227
**Name of the Vulnerable Software and Affected Versions**
Joomla! Core versions 4.0.0 through 5.4.8
Joomla! Core versions 6.0.0 through 6.1.3
**Description**
An issue exists where the premature issuance of a `rememberme` cookie allows for a Multi-Factor Authentication (MFA) bypass. MFA is a security process that requires users to provide two or more verification factors to gain access to a resource.
**Recommendations**
Update Joomla! Core versions 4.0.0 through 5.4.8 to a version newer than 5.4.8.
Update Joomla! Core versions 6.0.0 through 6.1.3 to a version newer than 6.1.3.