CVE-2026-35223
CVE-2026-35223 · Joomla! Core - [20260508] - Improper access check in com_config webservice endpoints
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An improper access check allows unauthorized access to com_config webservice endpoints.
CVSS 8.6 · High · EPSS 12.8% · Public exploit
- Published
- Updated
Affected products and versions
joomla! cms
- Versions
- 4.0.0-5.4.5: Affected
- 6.0.0-6.1.0: Affected
No fix published