Joomla: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Joomla ausnutzen, um Angriffe wie Cross-Site Scripting (XSS), SQL-Injection, Privilegienerweiterung, Umgehung der Authentifizierung, Path Traversal, Local File Inclusion (LFI) und unbefugten Zugriff…
Source: BSI CERT-Bund WID. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. Full body and expert context live with the original.
Read the issue at BSI CERT-Bund WID →Full advisory
bsi:WID-SEC-2026-1688medium20 linked CVEs
Open advisory with all CVEs →
More on Joomla
Other advisories
- CVE-2026-102783noneIn der Erweiterung von Joomla von balbooa.
- CVE-2026-102784noneIn der Erweiterung von Joomla von balbooa.
- CVE-2026-92232noneJoomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3
- CVE-2026-92231noneJoomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3
- CVE-2026-92227noneJoomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
- CVE-2026-92226noneJoomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
- CVE-2026-92225noneJoomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
- CVE-2026-92224noneJoomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
Other news entries
- Vulnerabilitybsi-cert-bund-wid2026-09-30Joomla: Mehrere Schwachstellen
- Vulnerabilitybsi-cert-bund-wid2026-08-19Joomla: Mehrere Schwachstellen
- Newscert-fr2026-08-19Multiples vulnérabilités dans Joomla! (19 août 2026)
- Newstheregister-security2026-07-14Baddies caught exploiting extensions bugs with perfect 10 scores on vulnerable Joomla websites
- Newsbleepingcomputer2026-07-13CISA warns of actively exploited RCE flaws in Joomla extensions
- Newssecurityweek2026-07-13Organizations Warned of Exploited Joomla Extension Vulnerabilities
- Newsthehackernews2026-07-13iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
- Vulnerabilitybsi-cert-bund-wid2026-07-09Joomla: Mehrere Schwachstellen
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1688
ID