CVE-2026-48958

Joomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpoints PUBLISHED

Description (CNA)

An improper access check allows unauthorized users to create custom fields via webservices endpoints.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.0.0-5.4.6; affected 6.0.0-6.1.1

CWE-284

CISA-ADP

No English description supplied.

No references supplied.