Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create categories via webservices endpoints.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://developer.joomla.org/security-centre/1072-20260805-core-improper-acl-checks-for-category-webservice-endpoints.html Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.1 · joomlaNVD modified 2026-10-22 22:10
Affected (CPE criteria) 1
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*