What is GHSA-wwj2-vfcx-6xww?

GHSA-wwj2-vfcx-6xww is a security advisory published by GitHub Security Advisories with Medium severity. Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0...

Which CVE IDs does GHSA-wwj2-vfcx-6xww cover?

GHSA-wwj2-vfcx-6xww covers the following CVE IDs: CVE-2026-72532. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-wwj2-vfcx-6xwwMedium

Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0...

Vendor

GitHub Security Advisories

Published

August 18, 2026

Last Modified

August 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-72532 →

📋 Description

Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create categories via webservices endpoints.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-72532
https://developer.joomla.org/security-centre/1072-20260805-core-improper-acl-checks-for-category-webservice-endpoints.html
https://www.joomla.org
https://github.com/advisories/GHSA-wwj2-vfcx-6xww