CVE-2026-65881

CVE-2026-65881: Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1

Vendor Joomdle.com

Product Joomdle component for Joomla

Weakness CWE-1188

Published July 28, 2026

Last update July 28, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1 - The default configuration of the extension allowed read access and password reset of CMS accounts.

Key dates

02Disclosure timeline

July 28, 2026 CVE published

July 28, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-65881 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1188.html AskarLabs — CWE-1188 write-up Insecure Default Initialization of Resource

Related vulnerabilities

CVE-2026-65881: Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1

01Description

02Disclosure timeline

03References

04Related CVE