{"schema_version":1,"title":"Joomla! Joomla CMS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Joomla! Joomla CMS: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-92226, was published on 29 September 2026. Nothing in the last four weeks, down from 6 vulnerabilities in the four before.","url":"https://junglewise.ai/threats/technologies/joomla-joomla-cms-1","json_url":"https://junglewise.ai/threats/technologies/joomla-joomla-cms-1.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/joomla-joomla-cms-1","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":6,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":6},"latest":[{"cve":"CVE-2026-92226","slug":"cve-2026-92226-joomla-core-20260913-core-improper-acl-checks-for-varous","title":"Joomla Core improper ACL checks in webservice edit tasks","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:14.56+00:00","url":"https://junglewise.ai/threats/cve-2026-92226-joomla-core-20260913-core-improper-acl-checks-for-varous"},{"cve":"CVE-2026-92222","slug":"cve-2026-92222-joomla-core-20260909-core-ssrf-vectors-in-various-core-extensions","title":"Joomla CMS server-side request forgery in core extensions","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:14.02+00:00","url":"https://junglewise.ai/threats/cve-2026-92222-joomla-core-20260909-core-ssrf-vectors-in-various-core-extensions"},{"cve":"CVE-2026-90917","slug":"cve-2026-90917-joomla-core-20260907-core-improper-acl-checks-in-outputs-for","title":"Joomla Core improper ACL checks in tagged items","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:13.767+00:00","url":"https://junglewise.ai/threats/cve-2026-90917-joomla-core-20260907-core-improper-acl-checks-in-outputs-for"},{"cve":"CVE-2026-90916","slug":"cve-2026-90916-joomla-core-20260906-core-improper-acl-checks-in-content-history","title":"Joomla CMS improper ACL checks in content history comparison","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:13.643+00:00","url":"https://junglewise.ai/threats/cve-2026-90916-joomla-core-20260906-core-improper-acl-checks-in-content-history"},{"cve":"CVE-2026-90915","slug":"cve-2026-90915-joomla-core-20260905-core-arbitrary-directory-deletion-via-cache","title":"Joomla Core arbitrary directory deletion via cache purge","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:13.52+00:00","url":"https://junglewise.ai/threats/cve-2026-90915-joomla-core-20260905-core-arbitrary-directory-deletion-via-cache"},{"cve":"CVE-2026-90907","slug":"cve-2026-90907-joomla-core-20260902-core-unauthorized-user-account-creation-via","title":"Joomla CMS authorization bypass in profile.save controller","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:13.11+00:00","url":"https://junglewise.ai/threats/cve-2026-90907-joomla-core-20260902-core-unauthorized-user-account-creation-via"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Joomla! Joomla","slug":"joomla","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/joomla"}],"technology":{"hub":true,"name":"Joomla! Joomla CMS","slug":"joomla-joomla-cms-1","vendor":{"hub":true,"name":"Joomla!","slug":"joomla","url":"https://junglewise.ai/threats/vendors/joomla"},"aliases":["joomla-cms-1"],"category":"cms","homepage":"https://www.joomla.org","description":"Open-source content management system.","url":"https://junglewise.ai/threats/technologies/joomla-joomla-cms-1"},"most_severe":[{"cve":"CVE-2026-92226","slug":"cve-2026-92226-joomla-core-20260913-core-improper-acl-checks-for-varous","title":"Joomla Core improper ACL checks in webservice edit tasks","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:14.56+00:00","url":"https://junglewise.ai/threats/cve-2026-92226-joomla-core-20260913-core-improper-acl-checks-for-varous"},{"cve":"CVE-2026-92222","slug":"cve-2026-92222-joomla-core-20260909-core-ssrf-vectors-in-various-core-extensions","title":"Joomla CMS server-side request forgery in core extensions","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:14.02+00:00","url":"https://junglewise.ai/threats/cve-2026-92222-joomla-core-20260909-core-ssrf-vectors-in-various-core-extensions"},{"cve":"CVE-2026-90917","slug":"cve-2026-90917-joomla-core-20260907-core-improper-acl-checks-in-outputs-for","title":"Joomla Core improper ACL checks in tagged items","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:13.767+00:00","url":"https://junglewise.ai/threats/cve-2026-90917-joomla-core-20260907-core-improper-acl-checks-in-outputs-for"},{"cve":"CVE-2026-90916","slug":"cve-2026-90916-joomla-core-20260906-core-improper-acl-checks-in-content-history","title":"Joomla CMS improper ACL checks in content history comparison","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:13.643+00:00","url":"https://junglewise.ai/threats/cve-2026-90916-joomla-core-20260906-core-improper-acl-checks-in-content-history"},{"cve":"CVE-2026-90915","slug":"cve-2026-90915-joomla-core-20260905-core-arbitrary-directory-deletion-via-cache","title":"Joomla Core arbitrary directory deletion via cache purge","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:13.52+00:00","url":"https://junglewise.ai/threats/cve-2026-90915-joomla-core-20260905-core-arbitrary-directory-deletion-via-cache"},{"cve":"CVE-2026-90907","slug":"cve-2026-90907-joomla-core-20260902-core-unauthorized-user-account-creation-via","title":"Joomla CMS authorization bypass in profile.save controller","severity":"info","exploited":false,"published_at":"2026-09-29T17:17:13.11+00:00","url":"https://junglewise.ai/threats/cve-2026-90907-joomla-core-20260902-core-unauthorized-user-account-creation-via"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}