CVE-2026-92227

UNKNOWN

Description

Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The premature issuance of an rememberme cookie leads to a MFA bypass vulnerability.

Timeline

Published:September 29th, 2026 5:17 PM

Last modified:September 30th, 2026 4:19 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-287

References & Reports

Advisories, patches, and third-party reports

https://developer.joomla.org/security-centre/1094-20260914-core-mfa-authentication-bypass-through-rememberme-cookies.html
https://www.joomla.org/

Source: NIST NVD · Data may lag official sources by up to one minute