CVE-2026-65944

Analyzed Analyzed - Analysis Complete

CSRF Vulnerabilities in RO CSVI Joomla Extension

Publication date: 2026-07-29

Last updated on: 2026-08-05

Assigner: Joomla! Project

Description

Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-29

Last Modified

2026-08-05

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-65944

Affected Vendors & Products

Vendor	Product	Version / Range
rolandd	ro_csvi	to 9.11.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-352	The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is a Cross-Site Request Forgery (CSRF) issue in the RO CSVI Joomla extension versions before 9.11.0. It affects AJAX endpoint handlers, allowing attackers to perform unauthorized actions via crafted requests.

Detection Guidance

This vulnerability involves CSRF vectors in AJAX endpoint handlers in RO CSVI for Joomla. To detect it, inspect Joomla extensions for RO CSVI versions below 9.11.0. Check server logs for unusual AJAX requests or unauthorized actions. Use Joomla admin panel to review installed extensions and their versions.

Impact Analysis

An attacker could trick authenticated users into executing unwanted actions, such as modifying data or triggering unintended operations, potentially leading to data breaches or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's integrity and confidentiality requirements or HIPAA's safeguards for protected health information.

Mitigation Strategies

Update the RO CSVI extension to version 9.11.0 or later to address the CSRF vulnerabilities in AJAX endpoint handlers.

Hi! I’m here to help you understand CVE-2026-65944. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70