https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:15:54.307886+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-joomla-2026-48902 BIT-joomla-2026-48902 — Joomla! Core - [20260518] - Transport encryption downgrade for password and username reset links 2026-10-04T15:15:54.311690+00:00

Affected: Bitnami: joomla

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0649 certfr-2026-avi-0649 — De multiples vulnérabilités ont été découvertes dans Joomla!. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-04T15:15:54.311736+00:00 certfr-2026-avi-0649 https://cve.radiocsirt.org/vuln/euvd-2026-324805 EUVD-2026-324805 2026-10-04T15:15:54.311757+00:00 EUVD-2026-324805 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48902 fkie_cve-2026-48902 2026-10-04T15:15:54.311770+00:00

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set.

 https://cve.radiocsirt.org/vuln/ghsa-w4ph-7vgc-vxrf GHSA-w4ph-7vgc-vxrf 2026-10-04T15:15:54.311825+00:00

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1688 WID-SEC-W-2026-1688 — Joomla: Mehrere Schwachstellen 2026-10-04T15:15:54.311853+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Joomla ausnutzen, um Angriffe wie Cross-Site Scripting (XSS), SQL-Injection, Privilegienerweiterung, Umgehung der Authentifizierung, Path Traversal, Local File Inclusion (LFI) und unbefugten Zugriff durchzuführen.