News - Security News
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
CVE-2026-102786 is a critical vulnerability in PHP, not Joomla core, but Joomla sites may be exposed when their server runs an affected PHP release. Administrators should identify the runtime version, arrange a server-level update where needed, and validate the site after the upgrade.
Read more: CVE-2026-102786: PHP Runtime Risk for Joomla Sites
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
A hosting-side WAF change can sometimes prevent legitimate Joomla administrator requests from completing, leaving article, configuration or form saves unable to finish as expected. This is a configuration and compatibility troubleshooting issue, not a confirmed Joomla or cPanel vulnerability, and it should be handled with targeted testing and rule review rather than by disabling site protections wholesale.
Read more: When cPanel WAF Rules Break Joomla Administrator Saves
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
This Joomla tutorial explains a practical local-development workflow with ServerMaster for developers who prefer not to assemble a MAMP stack or container configuration for every project. It also sets clear boundaries: a local runtime is for trusted development work and is not a substitute for production-grade hosting, patch management, or internet-facing security controls.
Read more: Run Joomla Locally Without MAMP or Docker: A ServerMaster Guide
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
A Joomla extension update that contains a security fix should be clearly distinguishable from a routine feature or maintenance release. Using the documented <security> update metadata mechanism can help site owners and their management processes recognise releases that deserve prompt attention, but it is only a classification signal—not a fix in itself.
Read more: How to Flag Joomla Extension Updates as Security Releases
