← Database

CVE-2026-48904

CRITICAL CVSS: 9.8 Published: 2026-05-26 Modified: 2026-07-24

Description

An improper access check allows privelege escalation through the com_users group editing webservice endpoint.

Affected Platforms

Joomla Joomla\!

Weakness Type

CWE-284, NVD-CWE-noinfo

References