67 matches found
CVE-2026-90907
CVE-2026-90907 — Joomla! CMS Unauthorized User Account Creation FOR AUTHORIZED SECURITY TESTING ONLY. Running the exploit mode against systems you do not own or do not have explicit written permission to test is illegal. The default mode CHECK is non-destructive and creates nothing. CLI tool that...
Exploit for CVE-2026-90907
CVE-2026-90907 — Joomla! CMS Unauthorized User Account Creatio...
CVE-2026-48899
An improper access check allows privilege escalation through the comusers batch task...
CVE-2026-35220
Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of comusers...
CVE-2026-48898
An improper access check allows privilege escalation through the comusers batch task...
CVE-2026-48904
An improper access check allows privelege escalation through the comusers group editing webservice endpoint...
BIT-JOOMLA-2026-48904 Joomla! Core - [20260514] - Privilege escalation through com_users webservice endpoints
An improper access check allows privelege escalation through the comusers group editing webservice endpoint...
CVE-2026-48904
An improper access check allows privelege escalation through the comusers group editing webservice endpoint...
CVE-2026-48904
An improper access check allows privelege escalation through the comusers group editing webservice endpoint...
CVE-2026-48898
An improper access check allows privilege escalation through the comusers batch task...
CVE-2026-48898
An improper access check allows privilege escalation through the comusers batch task...
CVE-2026-48899
An improper access check allows privilege escalation through the comusers batch task...
CVE-2026-35220
Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of comusers...
CVE-2026-35220
This CVE (CVE-2026-35220) concerns Joomla! core (com_users) with an admin activation endpoint lacking CSRF token validation. The underlying issue enables a CSRF attack vector against the activation flow, as indicated by the description from multiple sources. The CVSS assessment (4.6, MEDIUM) refl...
EUVD-2026-31880
An improper access check allows privilege escalation through the comusers batch task...
CVE-2026-48899
An improper access check allows privilege escalation through the comusers batch task...
CVE-2026-48899 Joomla! Core - [20260515] - Incorrect Access Control in sample data plugins
An improper access check allows privilege escalation through the comusers batch task...
CVE-2026-48899 Joomla! Core - [20260515] - Incorrect Access Control in sample data plugins
An improper access check allows privilege escalation through the comusers batch task...
CVE-2026-48904
CVE-2026-48904 affects Joomla! Core via the com_users webservice endpoints. An improper access check enables privilege escalation from group editing operations, leading to potential HIGH/CRITICAL impact per cited CVSS vectors (C/H, I/H, A/H). The public material specifies the affected component (...