CVE-2026-71572

Analyzed Analyzed - Analysis Complete

Response Header Injection in Joomla Core Download Views

Publication date: 2026-08-18

Last updated on: 2026-09-03

Assigner: Joomla! Project

Description

Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-09-03

Generated

2026-09-07

AI Q&A

2026-08-18

EPSS Evaluated

2026-09-06

NVD

CVE-2026-71572

EUVD

EUVD-2026-61030

Affected Vendors & Products

Vendor	Product	Version / Range
joomla	joomla!	From 6.0.0 (inc) to 6.1.3 (inc)
joomla	joomla!	From 3.0.0 (inc) to 5.4.8 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-93	The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.

Attack-Flow Graph

Executive Summary

CVE-2026-71572 is a response header injection vulnerability in Joomla! CMS versions 3.0.0-5.4.7 and 6.0.0-6.1.2. It occurs due to lack of output processing in download views, enabling attackers to inject malicious headers. This can lead to reflected file download attacks or content-type confusion.

Detection Guidance

To detect this vulnerability, check if your Joomla installation is running versions 3.0.0-5.4.7 or 6.0.0-6.1.2. Inspect download views for improper output processing that could allow header injection. Review server logs for unusual download requests or content-type modifications.

Impact Analysis

An attacker could exploit this to trick users into downloading malicious files or misinterpreting file types. This may result in unauthorized code execution, data theft, or malware installation on affected systems.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling reflected file download attacks or content-type confusion. Such attacks may lead to unauthorized data exposure or manipulation, which could violate data protection requirements under these regulations.

Mitigation Strategies

Immediately upgrade Joomla to versions 5.4.8 or 6.1.3 or later. Apply the latest security patches from Joomla's official releases. Monitor for any suspicious activity related to download views or header modifications.

Hi! I’m here to help you understand CVE-2026-71572. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70