CVE-2026-23898

Joomla! Core - [20260305] - Arbitrary file deletion in com_joomlaupdate PUBLISHED

Description (CNA)

Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.0.0-5.4.3; affected 6.0.0-6.0.3

CWE-73

CISA-ADP

No English description supplied.

No references supplied.