CVE-2026-21629

Joomla! Core - [20260301] - ACL hardening in com_ajax PUBLISHED

Description (CNA)

The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers.

Affected (CNA)

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 3.0.0-5.4.3; affected 6.0.0-6.0.3

CWE

CWE-284

References

https://developer.joomla.org/security-centre/1027-20260301-core-acl-hardening-in-com-ajax.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.