poslední zpráva · zachyceno
SPOJENO PŘES CVE EPSS 0.01 (nejvyšší)
Joomla 6.1.3 & 5.4.8 Security & Bugfix Release
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 8.9, CVEs: CVE-2026-73372, CVE-2026-73336, CVE-2026-72531, CVE-2026-71573, CVE-2026-71572, CVE-2026-73373, CVE-2026-73371, CVE-2026-73337, CVE-2026-72532, CVE-2026-71574, Summary: The Joomla! Project is pleased to announce the release of Joomla 6.1.3 and Joomla 5.4.8. These are security & bugfix releases for the Joomla 5.x and 6.x series.
Joomla FI FR
CVE v události 10
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-71572 | 4.8 4.0 · Joomla | – | 0.00 |
| CVE-2026-71573 | 6.9 4.0 · Joomla | – | 0.00 |
| CVE-2026-71574 | 8.5 4.0 · Joomla | – | 0.00 |
| CVE-2026-72531 | 5.1 4.0 · Joomla | – | 0.00 |
| CVE-2026-72532 | 5.1 4.0 · Joomla | – | 0.00 |
| CVE-2026-73336 | 5.1 4.0 · Joomla | – | 0.00 |
| CVE-2026-73337 | 8.2 4.0 · Joomla | – | 0.00 |
| CVE-2026-73371 | 5.1 4.0 · Joomla | – | 0.00 |
| CVE-2026-73372 | 5.1 4.0 · Joomla | – | 0.00 |
| CVE-2026-73373 | 8.9 4.0 · Joomla | – | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.9.
Jak se o tom psalo 2
-
· zachyceno · NCSC-FI FI nadpis události
Joomla 6.1.3 & 5.4.8 Security & Bugfix Release
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 8.9, CVEs: CVE-2026-73372, CVE-2026-73336, CVE-2026-72531, CVE-2026-71573, CVE-2026-71572, CVE-2026-73373, CVE-2026-73371, CVE-2026-73337, CVE-2026-72532, CVE-2026-71574, Summary: The Joomla! Project is pleased to announce the release of Joomla 6.1.3 and Joomla 5.4.8. These are security & bugfix releases for the Joomla 5.x and 6.x series.
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans Joomla! (19 août 2026)
De multiples vulnérabilités ont été découvertes dans Joomla!. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à l'intégrité des données et une injection de code indirecte à distance (XSS).