Cache Key Construction Flaw in Joomla's InputFilter Method

CVE-2026-48901

What is CVE-2026-48901?

A security-sensitive parameter has been omitted from the instance cache key in the InputFilter::getInstance() method of Joomla. This oversight could potentially lead to unauthorized information disclosure or exploitation by attackers who can manipulate the caching mechanism, thus impacting the integrity of the Joomla application. It is important for system administrators to review and apply the necessary security patches to mitigate this vulnerability.

References