CVE Catalog
CVE-2026-73371
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk0.29%
22th percentile - higher than 22% of all known CVEs
Summary
Joomla! Core versions 4.0.0-5.4.7 and 6.0.0-6.1.2 have improper ACL checks for batch copy actions. An improper access check allows unauthorized users to perform copy batch operations on uneditable items.
Risk Assessment
Unauthorized users can modify content by copying items they do not have permission to edit, potentially leading to data integrity issues.
Recommendation
Update Joomla! to a version containing the fix (5.4.8 or later, 6.1.3 or later).
Original NVD description (English source)
Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch operations on uneditable items.