CVE-2026-21627

creationtimestamp| type| source ---|---|--- 2026-03-30 17:49:10+00:00| seen| https://bsky.app/profile/mysites.guru/post/3mic7vp46v526 2026-03-30 19:49:04+00:00| seen| https://bsky.app/profile/mysites.guru/post/3micgmbotup2x 2026-04-13 19:49:04+00:00| seen|...

CVE-2026-21627 Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla

The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s comajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction...