CVE-2026-48947

Joomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpoints PUBLISHED

Description (CNA)

An improper access check allows privileged users to overwrite media files without editing permissions.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.1.0-5.4.6; affected 6.0.0-6.1.1

CWE-284

CISA-ADP

No English description supplied.

No references supplied.