CVE-2026-48948

No fix known EPSS <1%CVSS 6.4

An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.

Published 2026-07-07 · CVE record · OSV

Products: Joomla! Project Joomla! CMS