CVE Catalog
CVE-2026-71573
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk0.34%
27th percentile - higher than 27% of all known CVEs
Summary
Joomla! Core has an improper CORS origin validation. An improper implementation prevented configured CORS origins from being properly validated in CORS requests.
Risk Assessment
Improper CORS validation may allow unauthorized origins to make cross-origin requests, potentially leading to data leakage or CSRF attacks.
Recommendation
Update Joomla! to a version where CORS validation is fixed.
Original NVD description (English source)
Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests.