Skip to content
COOEY

FAIL › dossier

Joomla!

VENDOR

Failure events
8
Zero-days
0
RCEs
0
On KEV
1
Critical
7
Worst shame
45
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 16
DATEEVENTSEVSUMMARY
2024-01-08 CVE-2023-23752 high Joomla! CMS allows unauthorized access to webservice endpoints via improper access control, enabling attackers to bypass authentication and access sensitive data.
2024-01-08 CVE-2023-23752 high Joomla! CMS allows unauthorized access to webservice endpoints via improper access control, enabling attackers to bypass authentication and access sensitive data.
2026-05-26 CVE-2026-35222 critical CVE-2026-35222: Improperly validated order clauses lead to a SQL injection vulnerability in com_
2026-05-26 CVE-2026-35222 critical CVE-2026-35222: Improperly validated order clauses lead to a SQL injection vulnerability in com_
2026-05-26 CVE-2026-40383 critical CVE-2026-40383: An improper validation of user-supplied input leads to a local file inclusion vu
2026-05-26 CVE-2026-40383 critical CVE-2026-40383: An improper validation of user-supplied input leads to a local file inclusion vu
2026-05-26 CVE-2026-48904 critical CVE-2026-48904: An improper access check allows privelege escalation through the com_users group
2026-05-26 CVE-2026-48904 critical CVE-2026-48904: An improper access check allows privelege escalation through the com_users group
2026-05-26 CVE-2026-48899 critical CVE-2026-48899: An improper access check allows privilege escalation through the com_users batch
2026-05-26 CVE-2026-48899 critical CVE-2026-48899: An improper access check allows privilege escalation through the com_users batch
2026-05-26 CVE-2026-48898 critical CVE-2026-48898: An improper access check allows privilege escalation through the com_users batch
2026-05-26 CVE-2026-48898 critical CVE-2026-48898: An improper access check allows privilege escalation through the com_users batch
2026-05-26 CVE-2026-35221 critical CVE-2026-35221: Improperly built filter clauses lead to a SQL injection vulnerability in the sea
2026-05-26 CVE-2026-35221 critical CVE-2026-35221: Improperly built filter clauses lead to a SQL injection vulnerability in the sea
2026-05-26 CVE-2026-35223 critical CVE-2026-35223: An improper access check allows unauthorized access to com_config webservice end
2026-05-26 CVE-2026-35223 critical CVE-2026-35223: An improper access check allows unauthorized access to com_config webservice end