A security flaw has been found in Joomla! Core, specifically affecting how it manages access to content workflow stages. This vulnerability, identified as CVE-2026-92223, could allow unauthorized individuals to make changes to the workflow status of content they shouldn’t be able to access. While rated as a low severity issue, it’s important for administrators to understand the risk and apply the necessary updates to maintain content integrity and security.<\/p>\n
Product Name:<\/strong> Joomla! Core<\/p>\n Published:<\/strong> September 29, 2026<\/p>\n Severity:<\/strong> LOW<\/p>\n Status:<\/strong> Analyzed<\/p>\n This vulnerability impacts specific versions of the Joomla! Content Management System (CMS). If you are running any of the following versions, your installation is affected:<\/p>\n The vulnerability has been thoroughly analyzed, and its details have been made public. Joomla! has provided information and solutions to address this issue.<\/p>\n This vulnerability is rated as Low Severity<\/strong>. While not critical, a low-severity rating indicates that the flaw could still lead to minor unauthorized actions or information exposure if exploited. In this case, it pertains to unauthorized users altering content workflow stages, which can disrupt content management processes and potentially lead to unapproved content moving through publication stages.<\/p>\n To secure your Joomla! installation against this improper access control vulnerability, it is crucial to upgrade your CMS to the patched versions as soon as possible. The recommended solution is to:<\/p>\n These updates contain the necessary fixes to prevent unauthorized users from changing workflow stages of inaccessible content. Always ensure you back up your website before performing any updates.<\/p>\n https:\/\/developer.joomla.org\/security-centre\/1090-20260910-core-improper-acl-checks-for-workflow-stage-changes.html<\/p>\n https:\/\/www.joomla.org\/<\/p>\n","protected":false},"excerpt":{"rendered":" Overview A security flaw has been found in Joomla! Core, specifically affecting how it manages access to content workflow stages. This vulnerability, identified as CVE-2026-92223, could allow unauthorized<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[782,1295,980,695,1294],"class_list":["post-4164","post","type-post","status-publish","format-standard","hentry","category-security","tag-access-control","tag-cms","tag-joomla","tag-web-security","tag-workflow"],"yoast_head":"\nAffected Products<\/h2>\n
\n
Current Status<\/h2>\n
Severity Level<\/h2>\n
Possible Solutions<\/h2>\n
\n
References<\/h2>\n