{"product":"joomla","productName":"Joomla","version":"3.10.12","verdict":"end_of_life","activelyExploited":false,"eol":{"isEol":true,"since":"2023-08-17","cycle":"3"},"counts":{"critical":2,"high":6,"medium":19,"low":0,"unknown":1},"vulnerabilities":[{"id":"CVE-2026-48902","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1050-20260518-core-transport-encryption-downgrade-for-password-and-username-reset-links.html"},{"id":"CVE-2024-27185","severity":"critical","score":9.1,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/942-20240802-core-cache-poisoning-in-pagination.html"},{"id":"CVE-2026-73373","severity":"high","score":8.9,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1077-20260810-core-unrestricted-uploads-of-shtml-files.html"},{"id":"CVE-2026-40383","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1041-20260509-core-lfi-in-htmlview-layout-parameter.html"},{"id":"CVE-2024-40749","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/956-20250103-core-read-acl-violation-in-multiple-core-views.html"},{"id":"CVE-2024-40748","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/955-20250102-core-xss-vector-in-the-id-attribute-of-menu-lists.html"},{"id":"CVE-2026-92232","severity":"high","score":7.1,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1096-20260916-core-xss-filter-bypass-in-inputfilter-via-whitespace-characters-in-html-data-uris.html"},{"id":"CVE-2026-92231","severity":"high","score":7.1,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1095-20260915-core-xss-filter-bypass-in-inputfilter-via-html5-entity-decode-mismatch.html"},{"id":"CVE-2026-90907","severity":"medium","score":6.9,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1082-20260902-core-unauthorized-user-account-creation-via-profile-save-controller.html"},{"id":"CVE-2026-30894","severity":"medium","score":6.9,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1035-20260503-core-xss-in-com-contenthistory"}],"moreVulnerabilities":18,"upgrade":{"recommended":"5.4.10"},"notes":["6 Joomla vulnerabilities are still under review and not included in this verdict."],"checkedAt":"2026-10-25","dataGeneratedAt":"2026-10-25T00:22:52.884Z"}