CVE-2026-48898 | Joomla CMS up to 5.4.5/6.1.0 com_users access control

A vulnerability was found in Joomla CMS up to 5.4.5/6.1.0. It has been classified as critical. Affected is an unknown function of the component com_users. Performing a manipulation results in improper access controls.

This vulnerability is reported as CVE-2026-48898. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More