Skip to content

CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-35223

Joomla! Core - [20260508] - Improper access check in com_config webservice endpoints

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-05-26
Updated: 2026-05-27
Assigning organization: Joomla

Description

An improper access check allows unauthorized access to com_config webservice endpoints.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

Default version status: unaffected

4.0.0-5.4.5affected
6.0.0-6.1.0affected

References

https://developer.joomla.org/security-centre/1040-20260508-core-improper-access-check-in-com-config-webservice-endpoints.html ↗