CVE-2026-63685

Received Received - Intake

Unauthorized Database Replacement in Joomla

Publication date: 2026-07-22

Last updated on: 2026-07-22

Assigner: Joomla! Project

Description

Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-22

Last Modified

2026-07-22

Generated

2026-07-23

AI Q&A

2026-07-23

EPSS Evaluated

N/A

NVD

CVE-2026-63685

Affected Vendors & Products

Vendor	Product	Version / Range
joomla	joomla	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability involves administrator routes and replacement requests in Joomla that did not consistently require Super User permission and a valid token. This means an unauthorized user or a CSRF attack could perform database replacements, potentially leading to major data corruption or full site compromise.

Impact Analysis

An attacker could exploit this to replace database content without proper authorization. This may result in data corruption, loss of critical information, or complete takeover of the Joomla site, affecting its functionality and security.

Compliance Impact

This vulnerability could lead to unauthorized data modifications or breaches, violating compliance requirements for GDPR and HIPAA. It may result in data integrity issues, unauthorized access to sensitive information, and potential legal consequences for affected organizations.

Mitigation Strategies

Update Joomla to the latest version to ensure administrator routes and replacement requests require Super User permission and a valid token. Review user permissions and disable unnecessary accounts. Monitor for unusual database activity or unauthorized changes.

Hi! I’m here to help you understand CVE-2026-63685. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70