PT-2026-102693

CVE-2026-90917

Published

2026-09-29

Updated

2026-10-07

Description by

CVSS 4.0

6.9

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 4.0.0 through 5.4.8 Joomla! Core versions 6.0.0 through 6.1.3

Description An improper Access Control List (ACL) check occurs in the outputs for tagged items. This flaw allows unauthorized users to view content items that belong to categories they are not permitted to access.

Recommendations Update Joomla! Core versions 4.0.0 through 5.4.8 to a version newer than 5.4.8. Update Joomla! Core versions 6.0.0 through 6.1.3 to a version newer than 6.1.3.

Exploitability

Fix

Impacts

Researchers

Amin İsayev

Sabuhi Mammadov

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

Related identifiers

CVE-2026-90917