Product by Open Source
Joomla CMS
10 known vulnerabilities in Joomla CMS (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-73373 | Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 | 9.8 | |
| High | CVE-2026-73337 | Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 | 7.5 | |
| High | CVE-2026-71574 | Joomla! CMS: Improper Access Control | 6.5 | |
| High | CVE-2026-71573 | Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 | 8.3 | |
| Medium | CVE-2026-73336 | Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 | 6.4 | |
| Medium | CVE-2026-72532 | Joomla! CMS: Improper Access Control | 5.4 | |
| Medium | CVE-2026-72531 | Joomla! CMS: Improper Access Control | 5.4 | |
| Medium | CVE-2026-71572 | Joomla! CMS: CRLF Injection | 5.4 | |
| Medium | CVE-2026-73372 | Joomla! CMS: Improper Access Control | 4.3 | |
| Medium | CVE-2026-73371 | Joomla! CMS: Improper Access Control | 4.3 |