CVE-2026-21626: Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla
Published Feb 6, 2026
·Updated
Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure
Affected Software
2 affected components
StackIdeas EasyDiscuss>=1.0.0<5.0.15
StackIdeas Easydiscuss Joomla\!>=1.0.0<=5.0.15
Event History
Feb 6, 2026
CVE Published
via MITRE·07:49 AM
Data Sourced
via MITRE·07:49 AM
DescriptionWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-21626?
CVE-2026-21626 has a medium severity rating due to its potential for information disclosure.
2
How do I fix CVE-2026-21626?
To fix CVE-2026-21626, update EasyDiscuss to the latest version that addresses this vulnerability.
3
What are the affected versions of EasyDiscuss for CVE-2026-21626?
CVE-2026-21626 affects EasyDiscuss versions from 1.0.0 to 5.0.15.
4
What is the nature of the vulnerability in CVE-2026-21626?
CVE-2026-21626 is an information disclosure vulnerability caused by inadequate application of Access Control List (ACL) settings.
5
Who is the vendor associated with CVE-2026-21626?
The vendor associated with CVE-2026-21626 is StackIdeas.