miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-77995, Summary: Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.
EPSS 0.00 CVSS 10.0 CVE-2026-77995 Joomla miniOrange FI