Lucene search
+L

18 matches found

osv_bit
osv_bit
•added 2026/10/07 11:45 a.m.•24 views

BIT-JOOMLA-2026-92223 Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update the workflow stage of inaccessible contents...

5.1CVSS5.8AI score0.00162EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/02 12:00 a.m.•17 views

Joomla 5.0.x < 5.4.9 / 6.0.x < 6.1.4 Improper ACL Checks For Workflow Stage Changes

According to its self-reported version, the instance of Joomla! running on the remote web server is 5.0.x prior to 5.4.9 or 6.0.x prior to 6.1.4. It is, therefore, affected by a vulnerability. - Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8,...

5.1CVSS5.9AI score0.00162EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/29 5:17 p.m.•13 views

CVE-2026-92223

Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update the workflow stage of inaccessible contents...

5.1CVSS0.00162EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/09/29 5:17 p.m.•12 views

CVE-2026-92223

Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update the workflow stage of inaccessible contents...

3.8CVSS5.9AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 4:38 p.m.•14 views

EUVD-2026-89077

Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update the workflow stage of inaccessible contents...

5.1CVSS5.8AI score0.00162EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/29 4:38 p.m.•19 views

CVE-2026-92223

The Joomla! Core software is affected by an improper access check vulnerability in versions 5.0.0-5.4.8 and 6.0.0-6.1.3 . This flaw allows unauthorized users to bypass Access Control Lists (ACL) to update the workflow stage of contents that are otherwise inaccessible to them. No specific exploit ...

5.1CVSS5.8AI score0.00162EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/09/29 4:38 p.m.•46 views

CVE-2026-92223 Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update the workflow stage of inaccessible contents...

5.1CVSS0.00162EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/29 4:38 p.m.•10 views

CVE-2026-92223 Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update the workflow stage of inaccessible contents...

5.1CVSS5.8AI score0.00162EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•6 views

PT-2026-102696

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 5.0.0 through 5.4.8 Joomla! Core versions 6.0.0 through 6.1.3 Description An improper access control list ACL check allows unauthorized users to update the workflow stage of contents that should be inaccessible to them...

5.1CVSS5.7AI score0.00162EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•9 views

CVE-2026-92223: Improper Access Control

Joomla! Core - 20260910 - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update the workflow stage of inaccessible contents...

5.1CVSS5.8AI score0.00162EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/07/07 7:16 p.m.•24 views

CVE-2026-48955

An improper access check allows unauthorized users to access workflow stage and transition information...

6.5CVSS6.1AI score
SaveExploits0References1
NVD
NVD
•added 2026/07/07 7:16 p.m.•36 views

CVE-2026-48955

An improper access check allows unauthorized users to access workflow stage and transition information...

6.5CVSS0.00345EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/07 5:31 p.m.•29 views

EUVD-2026-42066

An improper access check allows unauthorized users to access workflow stage and transition information...

6.4CVSS5.8AI score0.00345EPSS
SaveExploits0References1
Mend
Mend
•added 2026/07/07 5:31 p.m.•8 views

CVE-2026-48955

An improper access check allows unauthorized users to access workflow stage and transition information...

6.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/07 5:31 p.m.•16 views

CVE-2026-48955

An improper access check allows unauthorized users to access workflow stage and transition information...

6.4CVSS5.8AI score0.00345EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/07 5:31 p.m.•21 views

CVE-2026-48955 Joomla! Core - [20260709] - Incorrect Access Control in com_workflow

An improper access check allows unauthorized users to access workflow stage and transition information...

6.4CVSS5.8AI score0.00345EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/07 12:00 a.m.•58 views

PT-2026-56228

Name of the Vulnerable Software and Affected Versions Joomla! Core affected versions not specified Description An improper access check allows unauthorized users to access workflow stage and transition information within the com workflow component. Recommendations At the moment, there is no...

6.5CVSS5.7AI score0.00345EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/07 12:00 a.m.•6 views

CVE-2026-48955: Improper Access Control

An improper access check allows unauthorized users to access workflow stage and transition information...

6.5CVSS5.8AI score0.00345EPSS
SaveExploits0References3
Rows per page
Query Builder