PT-2026-56229 · Unknown · Joomla! Cms

Warisjeet Singh

·

CVE-2026-48956

·

Published

2026-07-07

·

Updated

2026-07-12

CVSS v4.0

6.4

Medium

VectorAV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions Joomla! CMS versions 4.0.0 through 5.4.6 Joomla! CMS versions 6.0.0 through 6.1.1
Description Improper access control in the com modules component allows users to display a list of modules in the frontend that they should not be able to see.
Recommendations Update Joomla! CMS versions 4.0.0 through 5.4.6 to version 5.4.7. Update Joomla! CMS versions 6.0.0 through 6.1.1 to version 6.1.2.

Fix

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284

Related Identifiers

BIT-JOOMLA-2026-48956
CVE-2026-48956

Affected Products

Joomla! Cms