MEDIUMVulnerability

CVE-2026-72532

Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create categories via webservices endpoints.

Properties

severity
MEDIUM
score
5.4
epss_score
0.00319
cve_id
CVE-2026-72532
vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
published_at
2026-08-18T16:18:16.593
last_modified
2026-09-03T15:07:27.047
epss_percentile
0.24396

Related Entities (4)

ENRICHED_BY (1)

[Source]FIRST EPSS

AFFECTS_PRODUCT (1)

[Product]

HAS_WEAKNESS (1)

[Weakness]Improper Access Control

DESCRIBED_BY (1)

[Source]NVD

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-72532 — Ninja Signal Threat Intelligence | Ninja Signal