CVE-2026-90913 – Joomla! Core – [20260903] – Core – Improper ACL checks for access level webservice endpoin

Joomla! Core – [20260903] – Core – Improper ACL checks for access level webservice endpoints in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 – An improper access check allows unauthorized users to perform mutation actions in access level endpoints.