Joomla CMS Insecure ACL Check Vulnerability (CVE-2026-73372) Advisory

Vulnerability Overview Vulnerability ID: CVE-2026-73372 Description: An improper ACL check exists in the core module. Injecting schema.org contact data may lead to unauthorized access. Impact: Low Severity: Low Likelihood: Low Vulnerability Type: Incorrect Access Control Report Date: 2026-07-31 Fix Date: 2026-08-18 Affected Versions Affected Versions: Joomla! CMS 5.1.0-5.4.7, 6.0.0-6.1.2 Remediation Solution: Upgrade to version 5.4.8 or 6.1.3 Additional Information Reporter: Stefan Wendhausen Contact: JSST at the Joomla! Security Centre Page Links Current Page: Security Announcements Related Pages: Joomla! CMS, Joomla! Framework Resource Links Development Strategy: Development Strategy Product Strategy: Product Strategy Planned Features: Planned Features Security Announcements: Security Announcements Report Security Issues: Report Security Issues Generative AI Policy: Generative AI policy Usage Statistics: Usage Statistics Statistics API: Statistics API Documentation: Documentation Joomla! API Documentation: Joomla! API Documentation Coding Standards Manual: Coding Standards Manual Joomla!Code Archive: Joomla!Code Archive Mailing Lists Developer Network Newsletter: Developer Network Newsletter General Extensions Mailing List: General Extensions Mailing CMS Mailing List: CMS Mailing Framework Mailing List: Framework Mailing Documentation Mailing List: Documentation Mailing Footer Information Copyright: © 2005 - 2026 Open Source Matters, Inc. All Rights Reserved. Sponsors: ROCHEM Links: Home, About, Community, Forum, Extensions, Services, User Guide, Developer, Shop Policies: Accessibility Statement, Privacy Policy, Cookie Policy, Sponsor Joomla! with $5, Help Translate, Report an Issue, Log in

Goal Reached Thanks to every supporter — we hit 100%!

Joomla CMS Insecure ACL Check Vulnerability (CVE-2026-73372) Advisory