JO
CMS
Joomla
by Joomla · last CVE Sep 29, 2026
On CISA KEVExploited in the wild
420
CVEs
2
On KEV
9.8
Max CVSS
16
New 30D
Severity mix
Critical 38High 63Medium 149Low 3
Watch

Add Joomla to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92223
3.8
0%
Sep 29
Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3
Affected: 5.0.0-5.4.8; 6.0.0-6.1.3
CVE-2017-14595
3.7
1%
Sep 20
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state
Affected: 3.7.0; 3.7.1; 3.7.2; 3.7.3; 3.7.4; 3.7.5
CVE-2026-90916
2.7
0%
Sep 29
Joomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
Affected: 4.0.0-5.4.8; 6.0.0-6.1.3
Showing 3