Critical Vulnerabilities Discovered in Joomla! Impacting Data Security

Multiple vulnerabilities were discovered in Joomla! on 08 July 2026, as reported by CERT-FR. These flaws enable attackers to compromise data confidentiality, integrity, and execute remote indirect code injection (XSS). The notice specifies no CVE identifiers, affected versions, or technical exploitation details beyond the described impacts. The vulnerabilities were disclosed via the CERTFR-2026-AVI-0847 advisory, which focuses on the security risks without providing mitigation steps. The source of the report is the French government’s cybersecurity agency.