CVE-2026-48947General(joomla / joomla\!)

LOWCVSS 4.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An improper access check allows privileged users to overwrite media files without editing permissions.

joomla CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://developer.joomla.org/security-centre/1055-20260701-core-incorrect-access-control-in-com-media-webservice-endpoints.html

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

joomla\!

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
General: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

joomla

Products

joomla\!

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

General

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud91d
General
🚨*CVE* CVE-2026-48947 An improper access check allows privileged users to overwrite media files without editing permissions. https://www.cve.org/CVERecord?id=CVE-2026-48947 ----- Traducción: CVE-2026-48947 Un fallo de verificación de acceso permite a usuarios con privilegios… http://infoflow.cloud`
Post summary
The post merely announces CVE-2026-48947, noting that privileged users can overwrite media files, and links to the CVE record; it provides technical details but no exploitation, patch, or PoC information.
0000030
91 followersView on X
CVE@CVEnew91d
General
CVE-2026-48947 An improper access check allows privileged users to overwrite media files without editing permissions. https://www.cve.org/CVERecord?id=CVE-2026-48947
Post summary
The post provides a brief technical description of CVE‑2026‑48947, noting an improper access check that lets privileged users overwrite media files, but it does not include PoC, exploit code, patch info, or evidence of active exploitation.
00000641
57.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	joomla	joomla\!	-	-	-

Explore more

Back to dashboard joomla CVEs joomla\! vulnerabilities