CVE-2016-9081

—

CVSS 3.0

9.8 critical

EPSS

2%p80

Published

Jan 23, 2017 (Jan 23, 2017)

Modified

Jun 17, 2026

Description

Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors.

Vendors: joomla
Products: joomla\!
Ecosystems: Joomla
Weakness: CWE-255
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.