Spoofable Forwarded Headers Vulnerability in Regular Labs Products
CVE-2026-63683

7.5HIGH

Key Information:

Vendor: Regularlabs.com
Status: Advanced Module Manager Extension For Joomla; Conditional Content Extension For Joomla; Content Templater Pro Extension For Joomla; Rereplacer Extension Pro For Joomla
Vendor: CVE Published:; 22 July 2026

🔔 Create Regularlabs.com Vulnerability Alert

What is CVE-2026-63683?

This vulnerability allows remote clients to exploit trusted spoofable forwarded headers in Regular Labs products, enabling them to bypass critical location-based access controls. Attackers can manipulate the IP and GeoIP information, potentially compromising the security of applications relying on geographical restrictions for user access.

Affected Version(s)

Advanced Module Manager extension for Joomla 1.0.0-11.0.1

Conditional Content extension for Joomla 1.0.0-6.0.0

Content Templater Pro extension for Joomla 1.0.0-13.0.0

References

https://regularlabs.com/

product

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 22, 2026
Vulnerability Reserved
Jul 17, 2026

CVE-2026-63683 Data

JSON