{"product":"joomla","productName":"Joomla","version":"4.4.14","verdict":"end_of_life","activelyExploited":false,"eol":{"isEol":true,"since":"2025-10-14","cycle":"4"},"counts":{"critical":1,"high":19,"medium":38,"low":0,"unknown":0},"vulnerabilities":[{"id":"CVE-2026-48902","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1050-20260518-core-transport-encryption-downgrade-for-password-and-username-reset-links.html"},{"id":"CVE-2026-92222","severity":"high","score":8.9,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1089-20260909-core-ssrf-vectors-in-various-core-extensions.html"},{"id":"CVE-2026-73373","severity":"high","score":8.9,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1077-20260810-core-unrestricted-uploads-of-shtml-files.html"},{"id":"CVE-2026-35223","severity":"high","score":8.6,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1040-20260508-core-improper-access-check-in-com-config-webservice-endpoints.html"},{"id":"CVE-2026-23899","severity":"high","score":8.6,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1032-20260306-core-improper-access-check-in-webservice-endpoints.html"},{"id":"CVE-2026-23898","severity":"high","score":8.6,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1031-20260305-core-arbitrary-file-deletion-in-com-joomlaupdate.html"},{"id":"CVE-2026-71574","severity":"high","score":8.5,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1070-20260803-core-inconsistent-acl-checks-for-mutating-webservice-endpoints.html"},{"id":"CVE-2026-92227","severity":"high","score":8.2,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1094-20260914-core-mfa-authentication-bypass-through-rememberme-cookies.html"},{"id":"CVE-2026-73337","severity":"high","score":8.2,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1074-20260807-core-mfa-authentication-bypass.html"},{"id":"CVE-2026-48904","severity":"high","score":8.2,"kev":false,"advisoryUrl":"https://developer.joomla.org/security-centre/1046-20260514-core-privilege-escalation-through-com-users-webservice-endpoints.html"}],"moreVulnerabilities":48,"upgrade":{"recommended":"5.4.10"},"notes":["6 Joomla vulnerabilities are still under review and not included in this verdict."],"checkedAt":"2026-10-25","dataGeneratedAt":"2026-10-25T00:22:52.884Z"}