miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-77995, Summary: Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.

Číst originál na NCSC-FI →

1 zpráva z 1 zdroje · první 25. 8. 04:00 · poslední 25. 8. 04:00 CZ · EN/orig

Joomla miniOrange FI

tg: zranitelnost tp: identita

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-77995	10.0 4.0 · Joomla	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 10.0.

Jak se o tom psalo 1

25. 8. 2026 04:00 · NCSC-FI FI nadpis události

miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-77995, Summary: Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.