Question 1

What is CVE-2026-78074 — CVE-2026-78074?

Accepted Answer

Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected.

Question 2

What is the authoritative source for CVE-2026-78074?

Accepted Answer

CVE-2026-78074 (CVE-2026-78074) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.54% probability of exploitation · percentile 43.7% · 2026-10-05T12:00:23Z
Last modified	2026-09-08

CVE-2026-78074CVE-2026-78074

Description

Scoring