Vulnerability Description
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-77995?
CVE-2026-77995 is a documented vulnerability. Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Sing...
How severe is CVE-2026-77995?
CVSS scoring is not yet available for CVE-2026-77995. Check NVD for updates.
Is there a patch for CVE-2026-77995?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.