Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Unknown[20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIsCVE-2026-92232 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatchCVE-2026-92231 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260914] - Core - MFA Authentication Bypass through rememberme cookiesCVE-2026-92227 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260913] - Core - Improper ACL checks for varous webservice edit tasksCVE-2026-92226 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260912] - Core - XSS in module listCVE-2026-92225 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260910] - Core - Improper ACL checks for workflow stage changesCVE-2026-92223 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260909] - Core - SSRF vectors in various core extensionsCVE-2026-92222 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260911] - Core - XSS in link toolbar layoutCVE-2026-92224 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260908] - Core - XSS in HTML Mail TemplatesCVE-2026-90918 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260907] - Core - Improper ACL checks in outputs for tagged itemsCVE-2026-90917 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260906] - Core - Improper ACL checks in content history comparison viewCVE-2026-90916 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260905] - Core - Arbitrary directory deletion via cache purge actionCVE-2026-90915 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260904] - Core - XSS in the generic media output layoutsCVE-2026-90914 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260903] - Core - Improper ACL checks for access level webservice endpointsCVE-2026-90913 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260902] - Core - Unauthorized user account creation via profile.save controllerCVE-2026-90907 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260901] - Core - XSS in HTMLHelper::link methodCVE-2026-90906 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaSep 25, 2026
Unknown[20260810] - Core - Unrestricted uploads of SHTML filesCVE-2026-73373 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaAug 17, 2026
Unknown[20260809] - Core - Improper ACL checks when injection schema.org contact dataCVE-2026-73372 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaAug 17, 2026
Unknown[20260808] - Core - Improper ACL checks for batch copy actionsCVE-2026-73371 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaAug 17, 2026
Unknown[20260807] - Core - MFA Authentication BypassCVE-2026-73337 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaAug 17, 2026
Unknown[20260806] - Core - XSS through schema.org outputsCVE-2026-73336 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaAug 17, 2026
Unknown[20260805] - Core - Improper ACL checks for category webservice endpointsCVE-2026-72532 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaAug 17, 2026
Unknown[20260804] - Core - Improper ACL checks for custom fields webservice endpointsCVE-2026-72531 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaAug 17, 2026
Unknown[20260803] - Core - Inconsistent ACL checks for mutating webservice endpointsCVE-2026-71574 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaAug 17, 2026
Unknown[20260802] - Core - Improper CORS origin validationCVE-2026-71573 · Joomla · Joomla · CVE.org · Joomla Security · JoomlaAug 17, 2026