CVE-2026-48904

Joomla! Core - [20260514] - Privilege escalation through com_users webservice endpoints PUBLISHED

Description (CNA)

An improper access check allows privelege escalation through the com_users group editing webservice endpoint.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.0.0-5.4.5; affected 6.0.0-6.1.0

CWE-284

CISA-ADP

No English description supplied.

No references supplied.