Vulnérabilités Joomla

CVE-2026-77034 Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1 Extension Joomla — joomlaeventmanager.net · 1 source · il y a 30 j MEDIUM CVSS 6.9

CVE-2026-77998 Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4 Extension Joomla — miniorange.com · 1 source · il y a 31 j CRITICAL CVSS 10.0

CVE-2026-77997 Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 com_template · 1 source · il y a 31 j MEDIUM CVSS 5.1

CVE-2026-77996 Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 Extension Joomla — yootheme.com · 1 source · il y a 31 j HIGH CVSS 7.5

CVE-2026-77995 Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2 Extension Joomla — miniorange.com · 1 source · il y a 32 j CRITICAL CVSS 10.0

CVE-2026-77994 Second order SQL injection in Page Builder CK < 3.6.5 Extension Joomla — joomlack.fr · 1 source · il y a 33 j CRITICAL CVSS 9.3

CVE-2026-77993 Reflected XSS in Page Builder CK < 3.6.5 Extension Joomla — joomlack.fr · 1 source · il y a 33 j MEDIUM CVSS 5.3

CVE-2026-77992 heredoc terminator breakout in the calc element in Fabrik < 4.7.2 Extension Joomla — fabrikar.com · 1 source · il y a 34 j CRITICAL CVSS 9.5

CVE-2026-77027 Unauthenticated stored XSS in Fabrik < 4.7.2 Extension Joomla — fabrikar.com · 1 source · il y a 34 j HIGH CVSS 8.6

CVE-2026-76609 Unauthenticated modification of any comment in Fabrik < 4.7.2 Extension Joomla — fabrikar.com · 1 source · il y a 34 j MEDIUM CVSS 6.9

CVE-2026-76608 Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 Extension Joomla — fabrikar.com · 1 source · il y a 34 j MEDIUM CVSS 6.9

CVE-2026-76607 Missing ACL check in download element in Fabrik < 4.7.2. Extension Joomla — fabrikar.com · 1 source · il y a 34 j CRITICAL CVSS 10.0

CVE-2026-76606 Path Traversal via image element in Fabrik < 4.7.2. Extension Joomla — fabrikar.com · 1 source · il y a 34 j CRITICAL CVSS 10.0

CVE-2026-76605 Remote code execution via image element in Fabrik < 4.7.2. Extension Joomla — fabrikar.com · 1 source · il y a 34 j CRITICAL CVSS 10.0

CVE-2026-76604 Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 Extension Joomla — fabrikar.com · 1 source · il y a 34 j CRITICAL CVSS 10.0

CVE-2026-76603 Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 Extension Joomla — fabrikar.com · 1 source · il y a 34 j MEDIUM CVSS 6.9

CVE-2026-76602 Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 Extension Joomla — fabrikar.com · 1 source · il y a 34 j CRITICAL CVSS 9.3

CVE-2026-76601 Unauthenticated row reordering in Fabrik < 4.7.2 Extension Joomla — fabrikar.com · 1 source · il y a 34 j MEDIUM CVSS 6.9

CVE-2026-76600 Unauthenticated deletion of any comment in Fabrik < 4.7.2 Extension Joomla — fabrikar.com · 1 source · il y a 34 j MEDIUM CVSS 6.9

CVE-2026-76599 Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 Extension Joomla — fabrikar.com · 1 source · il y a 34 j HIGH CVSS 8.7