VULNERABILITY INTELLIGENCE
CVE-2026-76610
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-08-20
Last modified2026-08-26
Description
Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint lacked ACL checks, allowing unauthorized tag modifications by unauthenticated users.
Weakness classification
- security@joomla.org: CWE-284