CVE-2026-71573: Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2
Published Aug 18, 2026
·Updated
Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests.
Affected Software
2 affected components
Joomla Joomla! Core>=4.0.0<=5.4.7
Joomla Joomla! Core>=6.0.0<=6.1.2
Event History
Aug 18, 2026
CVE Published
via MITRE·04:09 PM
Data Sourced
via MITRE·04:09 PM
DescriptionWeakness
Frequently Asked Questions
1
Which Joomla! Core versions are affected?
Joomla! Core versions 4.0.0 through 5.4.7 and 6.0.0 through 6.1.2 are identified as affected.
2
Which configurations are most relevant to this issue?
The issue concerns configured CORS origins not being properly validated when processing CORS requests. Deployments that use configured CORS origins are therefore relevant to triage.