What’s Vulnerable › Products

miniorange.com miniOrange OAuth Client (free) extension for Joomla vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your miniorange.com miniOrange OAuth Client (free) extension for Joomla version is affected

Latest miniorange.com miniOrange OAuth Client (free) extension for Joomla vulnerabilities

• CVE-2026-77995 — Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2 (CVSS 10.0)