PT-2026-102689
CVE-2026-90913
·
Published
2026-09-29
·
Updated
2026-10-07
Description by
CVSS 4.0
7.0
HighMetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Joomla! Core versions 4.0.0 through 5.4.8
Joomla! Core versions 6.0.0 through 6.1.3
Description
Improper Access Control List (ACL) checks in webservice endpoints allow unauthorized users to perform mutation actions. ACL is a mechanism used to define permissions and restrict access to specific resources or functions within a system.
Recommendations
Update Joomla! Core versions 4.0.0 through 5.4.8 to a version newer than 5.4.8.
Update Joomla! Core versions 6.0.0 through 6.1.3 to a version newer than 6.1.3.
Found an issue in the description? Have something to add? Feel free to write us 👾