miniOrange OAuth Client (free) extension for Joomla — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in miniOrange OAuth Client (free) extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

Vendor: miniorange.com

CVE ID	Title	CVSS	Severity	Published
CVE-2026-78074	Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions CWE-284	8.8	High	2026-08-31
CVE-2026-77995	Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2 CWE-639	10.0	Critical	2026-08-24

All 2 known CVE vulnerabilities affecting miniOrange OAuth Client (free) extension for Joomla with full Chinese analysis, references, and POCs where available.