CVE-2026-21629
The ajax component was excluded from the default logged-in-user check in the administrative area.
Published Apr 1, 2026 · updated Jun 17, 2026 · joomla joomla!
The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 1, 2026 · NIST NVD
Detected
The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers.
Jun 17, 2026 · NIST NVD
Updated
The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers.
Affected
- cpe joomla/joomla!version unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-21629
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-21629
The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers.
nvd.nist.gov