Intel

CVE-2026-48901

Joomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objects

highEPSS 0.4%

Affected

  • bitnami/joomla 4.0.0..*
  • bitnami/joomla 6.0.0..*

Description

The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.

Source: OSV (Open Source Vulnerabilities)NVD (NIST)CVE.org (MITRE)cvelistv5ENISA EUVDBSI WID PortalBSI CSAF

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

bitnamijoomla
4.0.06.0.0

Metrics

XIEM Effective CVSS
7.5
Source: nvd-v3
EPSS percentile
33.9 %
Elevated — this CVE ranks above at least 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
high
Priority score
65.76
Exploit maturity
no public PoC known
CVSS v3
7.5
EPSS score
0.4 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-05-29 08:44 UTC

References & sources