Skip to content

CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2026-48957

Joomla! Core - [20260711] - Incorrect Access Control in com_privacy webservice endpoints

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-07-07
Updated: 2026-07-08
Assigning organization: Joomla

Description

An improper access check allows unauthorized users to access com_privacy datasets.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

Default version status: unaffected

4.0.0-5.4.6affected
6.0.0-6.1.1affected

References

https://developer.joomla.org/security-centre/1065-20260711-core-incorrect-access-control-in-com-privacy-webservice-endpoints.html ↗