CVE-2026-48898 - Joomla! Core - [20260513] - Privilege escalation through com_users batch task

HIGH

Joomla! Core - [20260513] - Privilege escalation through com_users batch task

Published May 26, 2026

8.2

HIGH

CVSS 4.0

EPSS 0.48%

An improper access check allows privilege escalation through the com_users batch task.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
4.0.0-5.4.5	affected	-
6.0.0-6.1.0	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-284

Link	Providers	Tags
https://developer.joomla.org/security-centre/1045-20260513-core-privilege-escalation-through-com-users-batch-task.html		vendor-advisoryVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31873		Advisory