Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create fields for inaccessible components.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://developer.joomla.org/security-centre/20260804-core-improper-acl-checks-for-custom-fields-webservice-endpoints.html Vendor Advisory, Broken Link
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.1 · joomlaNVD modified 2026-10-22 22:10
Affected (CPE criteria) 1
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
References 2
- https://developer.joomla.org/security-centre/20260804-core-improper-acl-checks-for-custom-fields-webservice-endpoints.html Vendor Advisory, Broken Link
- https://www.joomla.org/ Product