#webservice

0 stories this week · 0 this month · 5 in 6 months · mostly security

Stories per day · 30 days

5 stories, newest first · one card per story

Joomla fixed CVE-2026-90913, an ACL flaw allowing unauthorized mutations on access-level APIs.

Joomla webservice edit tasks skip ACL checks, allowing unauthorized edits; patched in 5.4.9 and 6.1.4.

Joomla fixes CVE-2026-72532, an improper ACL check letting unauthorized users create categories via webservice endpoints, in CMS 5.4.8/6.1.3.

Joomla patches CVE-2026-72531, an improper ACL check allowing unauthorized custom-field creation via webservice endpoints, in CMS 5.4.8/6.1.3.

Joomla fixes CVE-2026-71574, inconsistent ACL checks letting unauthorized users mutate data via webservice APIs, in CMS 5.4.8/6.1.3.

Stories tagged #webservice