PULSEUnderground Intel

LIVE50signals / 24h

FEED

ransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Servicesransomthegentlemen reclama a Tikona Infinet · IN · Technologyransomthegentlemen reclama a TC Printing · AU · Manufacturingransomthegentlemen reclama a Oldelval Oleoductos del Valle · AR · Energy & Utilitiesransomthegentlemen reclama a Decoupe Laser Services · FR · Manufacturingransomthegentlemen reclama a Thialf · NL · Energy & Utilitiesransomthegentlemen reclama a Title Resources · AU · Financial Servicesransomthegentlemen reclama a Clarke Radiology · AU · Healthcareransomthegentlemen reclama a SICSOE · FR · Not Foundransomthegentlemen reclama a Gloria Maris Groupe · FR · Agriculture and Food Productionransomthegentlemen reclama a Compagnie des Caoutchoucs du Pakidie · Manufacturingransomthegentlemen reclama a HBS Group · AU · Professional Servicesransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Servicesransomthegentlemen reclama a Tikona Infinet · IN · Technologyransomthegentlemen reclama a TC Printing · AU · Manufacturingransomthegentlemen reclama a Oldelval Oleoductos del Valle · AR · Energy & Utilitiesransomthegentlemen reclama a Decoupe Laser Services · FR · Manufacturingransomthegentlemen reclama a Thialf · NL · Energy & Utilitiesransomthegentlemen reclama a Title Resources · AU · Financial Servicesransomthegentlemen reclama a Clarke Radiology · AU · Healthcareransomthegentlemen reclama a SICSOE · FR · Not Foundransomthegentlemen reclama a Gloria Maris Groupe · FR · Agriculture and Food Productionransomthegentlemen reclama a Compagnie des Caoutchoucs du Pakidie · Manufacturingransomthegentlemen reclama a HBS Group · AU · Professional Services

CVE WatchJul 23, 2026

CVE-2026-65758

The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Jul 23, 2026 · Last modified: Jul 23, 2026 · CWE-200 · CWE-284

EPSS · 30d

Not enough EPSS history yet.

Technical description

The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.

Official references

www.tassos.grhttps://www.tassos.gr/joomla-extensions/convert-forms

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-65757—

——1The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens.6h CVE-2026-65430—

——3MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability.6h CVE-2026-64876—

——1Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates.6h CVE-2026-64874—

——3CDN credentials were exposed in administrator request URLs.6h CVE-2026-64871—

——1Administrator URL purges did not consistently require a valid token and cache-management permission.6h CVE-2024-583307.5 HIG

——12A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data.7h