LOWVulnerability
CVE-2026-78074
Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected.
Properties
- epss_score
- 0.0031
- cve_id
- CVE-2026-78074
- published_at
- 2026-08-31T14:17:23.633
- last_modified
- 2026-09-08T11:17:44.700
- epss_percentile
- 0.23511
Related Entities (3)
ENRICHED_BY (1)
→[Source]FIRST EPSS
DESCRIBED_BY (1)
→[Source]NVD
HAS_WEAKNESS (1)
→[Weakness]Improper Access Control
Explore deeper with Ninja Signal's threat intelligence graph