CVE-2026-72532 — Joomla! Core - [20260805] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2

CVE-2026-72532

Joomla! Core - [20260805] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 PUBLISHED

Description (CNA)

Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create categories via webservices endpoints.

Affected (CNA)

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.0.0-5.4.6; affected 6.0.0-6.1.2

CWE

CWE-284

References

https://www.joomla.org/
https://developer.joomla.org/security-centre/1072-20260805-core-improper-acl-checks-for-category-webservice-endpoints.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.