CVE-2026-21626

Publication date

2026-02-06 07:49:42

Family

Joomla

State

PUBLISHED

Description

Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure