Vulnerability Bulletins

CVE-2026-78074

   
Affected software JOOMLA
 
Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-78074