CVE-2026-48901

Description

The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.

Affected Platforms

Weakness Type

CWE-524

References

• https://developer.joomla.org/security-centre/1049-20260517-core-incorrect-cache-…