EUVD-2026-42061

An improper access check allows user to download vcard exports of comcontact contacts that are inaccessible...

CVE-2026-48948 Joomla! Core - [20260702] - Incorrect Access Control in com_contact vcf download

An improper access check allows user to download vcard exports of comcontact contacts that are inaccessible...

CVE-2026-48948

CVE-2026-48948 affects Joomla! Core (4.0) – specifically the com_contact component’s vCard download. The root cause is an improper access check that can disclose vCard exports for contacts that are otherwise inaccessible. This leads to potential exposure of contact data to users without proper au...

CVE-2026-48948

An improper access check allows user to download vcard exports of comcontact contacts that are inaccessible...