https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T01:37:15.068517+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-78074 CVE-2026-78074 — Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensio… 2026-09-30T01:37:15.097330+00:00

Affected: miniorgange.com miniOrange Oauth Client (free) extension for Joomla, miniorgange.com JoomShield by miniOrange (free) extension for Joomla, miniorgange.com Okta User sync/Bi-directional user management (free) extension for Joomla, miniorgange.com Keycloak user sync / User management (free) extension for Joomla, miniorgange.com Restrict Files / Folders / Media Access for Joomla (free) extension for Joomla, miniorgange.com LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login (free) extension for Joomla, miniorgange.com Login with Keycloak OAuth Single Sign-On (SSO) | Login with Keycloak (free) extension for Joomla, miniorgange.com SAML SSO login with google Apps (free) extension for Joomla, miniorgange.com SAML SP Single Sign On – Login with ADFS (free) extension for Joomla, miniorgange.com Web3 – Crypto wallet Login & NFT token gating (free) extension for Joomla and 13 more

Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected.