Findings

CVE-2026-48898

An improper access check allows privilege escalation through the com_users batch task.

Published May 26, 2026 · updated Jul 24, 2026 · joomla joomla!

An improper access check allows privilege escalation through the com_users batch task.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 26, 2026 · NIST NVD

    Detected

    An improper access check allows privilege escalation through the com_users batch task.

  2. Jul 24, 2026 · NIST NVD

    Updated

    An improper access check allows privilege escalation through the com_users batch task.

Affected

  • cpe joomla/joomla!version unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-48898

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-48898

    An improper access check allows privilege escalation through the com_users batch task.

    nvd.nist.gov

References