Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Techfry Component: Tf Content Clear all filters
TI-2026-67755 CVE-2026-102779 · GHSA-hqjq-hvr2-rrg3

Missing authorization in TF Content for Joomla lets guests run automation tasks

Priority LOW 36

Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site task `records.custom_action` without authentication, ACL, CSR…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00259 Published 2026-10-05 No fix listed CWE-862
TI-2026-67750 CVE-2026-102780 · GHSA-5q6m-pwqm-wmc9

Missing authorization in TF Content for Joomla lets guests edit data

Priority LOW 36

Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public `RecordContro…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0029 Published 2026-10-05 No fix listed CWE-862