New CVE: CVE-2026-115451 — joomla! (MEDIUM, 6.9)
Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.6 - Anyone could delete images in the Gallery folders, including images on published articles and modules, without logging in. In ACF 3.1.7 and 3.1.8, users could also… [MEDIUM]
https://nvd.nist.gov/vuln/detail/CVE-2026-115451