CVE-2026-48897

Published: Mag 26, 2026 Last Modified: Mag 26, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 8,2

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Confidentiality: N/A

Integrity: N/A

Availability: N/A

AI Translation Available

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

287

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Integrity Confidentiality Availability Access Control

Potential Impacts:

Read Application Data Gain Privileges Or Assume Identity Execute Unauthorized Code Or Commands

Technologies: Not Technology-Specific, Web Based, ICS/OT

Likelihood of Exploit: High

https://developer.joomla.org/security-centre/1044-20260512-core-mfa-authenticat…