A vulnerability classified as critical was found in Joomla CMS up to 5.4.3/6.0.3. Impacted is an unknown function. Executing a manipulation can lead to improper access controls.

The identification of this vulnerability is CVE-2026-23899. The attack may be launched remotely. There is no exploit available.