ZeroDay Findings
Sign inSign up

Findings

CVE-2026-73371

[20260808] - Core - Improper ACL checks for batch copy actions

Published Aug 17, 2026 · Joomla Joomla

Project: Joomla! SubProject: CMS Impact: Low Severity: Low Probability: Low Versions: 4.0.0-5.4.7,6.0.0-6.1.2 Exploit type: Incorrect Access Control Reported Date: 2026-07-28 Fixed Date: 2026-08-18 CVE Number: CVE-2026-73371 Description An improper access check allows unauthorized users to perform copy batch operations on uneditable items. Affected Installs Joomla! CMS versions 4.0.0-5.4.7, 6.0.0-6.1.2 Solution Upgrade to version 5.4.8, 6.1.3 Contact The JSST at the Joomla! Security Centre . Reported By: Sabuhi Mammadov

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 17, 2026 · Joomla Security

    Detected

    Project: Joomla! SubProject: CMS Impact: Low Severity: Low Probability: Low Versions: 4.0.0-5.4.7,6.0.0-6.1.2 Exploit type: Incorrect Access Control Reported Date: 2026-07-28 Fixed Date: 2026-08-18 CVE Number: CVE-2026-73371 Description An improper access check allows unauthorized users to perform copy batch operations on uneditable items. Affected Installs Joomla! CMS versions 4.0.0-5.4.7, 6.0.0-

Sources

  • CVE.orgVulnerability recordCVE-2026-73371

    Official CVE identifier

    cve.org
  • Joomla SecurityVendor advisoryCVE-2026-73371

    Project: Joomla! SubProject: CMS Impact: Low Severity: Low Probability: Low Versions: 4.0.0-5.4.7,6.0.0-6.1.2 Exploit type: Incorrect Access Control Reported Date: 2026-07-28 Fixed Date: 2026-08-18 CVE Number: CVE-2026-73371 Description An improper access check allows unauthorize

    developer.joomla.org