joomla joomla CVE-2026-73372 is a vulnerability in Joomla
Published on August 18, 2026

Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2
Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 - An improper access check injects contact information for unaccessible contact items into schema.org snippets.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-73372 is exploitable with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE

Weakness Type

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2026-73372 has been classified to as an Authorization vulnerability or weakness.


Products Associated with CVE-2026-73372

Want to know whenever a new CVE is published for Joomla? stack.watch will email you.

 

Affected Versions

Joomla! Project Joomla! CMS: