Is CVE-2026-78074 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-78074

Description

Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected.