VULNERABILITY INTELLIGENCE
CVE-2026-71570
EPSS probability0.41%
CISA KEVNot currently listed
Published2026-08-14
Last modified2026-10-24
Description
Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could enumerate Joomla user profiles.
Weakness classification
- security@joomla.org: CWE-284