Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#joomla — news, CVEs and analysis · ZeroHour

07:57 UTC· 10m ago

today 47 visits · 60 views · 7 reads·all time 17K views

Tag

#joomla

0 stories this week · 0 this month · 12 in 6 months · mostly security

stories per day · 30 days

12 stories, newest first · one card per story

Joomla Security Centre·Aug 17, 2026

[20260810] - Core - Unrestricted uploads of SHTML files

#cms #code-execution #cve-2026-73373

CVE-2026-73373

Joomla Security Centre·Aug 17, 2026

[20260809] - Core - Improper ACL checks when injection schema.org contact data

#access-control #cve-2026-73372 #information-disclosure

CVE-2026-73372

Joomla Security Centre·Aug 17, 2026

[20260808] - Core - Improper ACL checks for batch copy actions

#access-control #cve-2026-73371 #joomla

CVE-2026-73371

Joomla Security Centre·Aug 17, 2026

[20260807] - Core - MFA Authentication Bypass

#2fa #authentication-bypass #cve-2026-73337

CVE-2026-73337

Joomla Security Centre·Aug 17, 2026

[20260806] - Core - XSS through schema.org outputs

#cve-2026-73336 #joomla #schema-org

CVE-2026-73336

Joomla Security Centre·Aug 17, 2026

[20260805] - Core - Improper ACL checks for category webservice endpoints

#access-control #acl #api

CVE-2026-72532

Joomla Security Centre·Aug 17, 2026

[20260804] - Core - Improper ACL checks for custom fields webservice endpoints

#access-control #acl #cms

CVE-2026-72531

Joomla Security Centre·Aug 17, 2026

[20260803] - Core - Inconsistent ACL checks for mutating webservice endpoints

#access-control #acl #api

CVE-2026-71574

Joomla Security Centre·Aug 17, 2026

[20260802] - Core - Improper CORS origin validation

#cms #cors #joomla

CVE-2026-71573

Joomla Security Centre·Aug 17, 2026

[20260801] - Core - Response header injection in download views

#cms #header-injection #joomla

CVE-2026-71572

Exploit-DB·Aug 17, 2026

[webapps] Joomla JCE_2.9.15 - Remote Code Execution

#exploit #jce #joomla

Exploit / PoC

1

Rapid7 Blog·Aug 14, 2026

Metasploit Wrap Up: Lot of summer shells and fit http profiles

#exploit-modules #ghost-cms #joomla