CVE-2026-75114

An open redirect vulnerability exists in the CommentController::twitterAuthenticate() function of the Zoo extension for Joomla versions prior to 4.1.64, allowing attackers to manipulate the referer request parameter without validation. This could lead to phishing attacks or redirecting users to malicious sites. Joomla site administrators using affected versions should prioritize applying patches to mitigate potential exploitation.