CVE Catalog
CVE-2026-35223
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.35%
27th percentile - higher than 27% of all known CVEs
Summary
Improper access check in the com_config webservice component allows unauthorized access to endpoints.
Risk Assessment
Risk of unauthorized access to system configuration, potentially leading to data leakage or settings modification.
Recommendation
Implement proper authentication and authorization mechanisms for webservice endpoints.
Original NVD description (English source)
An improper access check allows unauthorized access to com_config webservice endpoints.