Sepetinizde ürün bulunmuyor.
[20260711] – Core – Incorrect Access Control in com_privacy webservice endpoints
![[20260711] – Core – Incorrect Access Control in com_privacy webservice endpoints](https://www.myeyre.com/wp-content/uploads/2026/07/wp-header-logo-23.png){kind=logo}
- Project: Joomla!
- SubProject: CMS
- Impact: Low
- Severity: Moderate
- Probability: Low
- Versions: 4.0.0-5.4.6, 6.0.0-6.1.1
- Exploit type: Incorrect Access Control
- Reported Date: 2026-06-12
- Fixed Date: 2026-07-07
- CVE Number: CVE-2026-48957
Description
An improper access check allows unauthorized users to access com_privacy datasets.
Affected Installs
Joomla! CMS versions 4.0.0-5.4.6, 6.0.0-6.0.0-6.1.1
Solution
Upgrade to version 5.4.7, 6.1.2
Contact
The JSST at the Joomla! Security Centre.
Reported By: Himanshu Anand
