CVE-2026-48948

Joomla! Core - [20260702] - Incorrect Access Control in com_contact vcf download PUBLISHED

Description (CNA)

An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 3.0.0-5.4.6; affected 6.0.0-6.1.1

CWE-284

CISA-ADP

No English description supplied.

No references supplied.