Vulnerability Bulletins

CVE-2026-77995

   
Affected software JOOMLA
 
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-77995