Alex JosephOverview
A security flaw has been found in Joomla! Core, specifically affecting how it manages access to content workflow stages. This vulnerability, identified as CVE-2026-92223, could allow unauthorized individuals to make changes to the workflow status of content they shouldn’t be able to access. While rated as a low severity issue, it’s important for administrators to understand the risk and apply the necessary updates to maintain content integrity and security.
CVE Details
Product Name: Joomla! Core
Published: September 29, 2026
Severity: LOW
Status: Analyzed
Affected Products
This vulnerability impacts specific versions of the Joomla! Content Management System (CMS). If you are running any of the following versions, your installation is affected:
- Joomla! CMS versions 5.0.0 through 5.4.8
- Joomla! CMS versions 6.0.0 through 6.1.3
Current Status
The vulnerability has been thoroughly analyzed, and its details have been made public. Joomla! has provided information and solutions to address this issue.
Severity Level
This vulnerability is rated as Low Severity. While not critical, a low-severity rating indicates that the flaw could still lead to minor unauthorized actions or information exposure if exploited. In this case, it pertains to unauthorized users altering content workflow stages, which can disrupt content management processes and potentially lead to unapproved content moving through publication stages.
Possible Solutions
To secure your Joomla! installation against this improper access control vulnerability, it is crucial to upgrade your CMS to the patched versions as soon as possible. The recommended solution is to:
- Upgrade to Joomla! CMS version 5.4.9
- Upgrade to Joomla! CMS version 6.1.4
These updates contain the necessary fixes to prevent unauthorized users from changing workflow stages of inaccessible content. Always ensure you back up your website before performing any updates.
References
https://developer.joomla.org/security-centre/1090-20260910-core-improper-acl-checks-for-workflow-stage-changes.html
https://www.joomla.org/
