CVE-2023-40626: Joomla!

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The language file parsing process could be manipulated to expose environment variables. Environment variables might contain sensible information.

Affected products

• Joomla! Joomla!: from 1.6.0, before 3.10.14 (fixed in 3.10.14); from 4.0.0, before 4.4.1 (fixed in 4.4.1); version 5.0.0 only

Published 2023-11-29. Last modified 2026-06-17.