← Database

CVE-2026-77995

N/A CVSS: N/A Published: 2026-08-24 Modified: 2026-08-26

Description

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.

Affected Platforms

Unknown

Weakness Type

CWE-639

References