CVE-2021-26040: 
Joomla vulnerability analysis and mitigation

A security vulnerability was discovered in Joomla! 4.0.0, identified as CVE-2021-26040. The issue relates to the media manager component, which fails to properly validate user permissions before executing file deletion commands. This vulnerability was reported on August 20, 2021, and was fixed on August 24, 2021, with the release of version 4.0.1 (Joomla Security).

The vulnerability is classified as an Incorrect Access Control issue with a High severity rating. The core problem lies in the media manager component (com_media) of Joomla! 4.0.0, where insufficient permission checks are implemented before executing file deletion operations (Joomla Security).

The vulnerability allows attackers to bypass security policies and potentially delete files without proper authorization. This could lead to unauthorized file deletion and potential system compromise (CERT-FR).

The vulnerability affects Joomla! CMS version 4.0.0. The exploit type is classified as an Incorrect Access Control vulnerability, which could be exploited through the media manager component (Joomla Security).

The vulnerability was addressed in Joomla! version 4.0.1. Users are advised to upgrade to this version or later to mitigate the security risk (Joomla Security).