Spoofable Forwarded Headers Vulnerability in Regular Labs Products
CVE-2026-63683

Currently unrated

Key Information:

Vendor: Regularlabs.com
Status: Advanced Module Manager Extension For Joomla; Conditional Content Extension For Joomla; Content Templater Pro Extension For Joomla; Rereplacer Extension Pro For Joomla
Vendor: CVE Published:; 22 July 2026

🔔 Create Regularlabs.com Vulnerability Alert

What is CVE-2026-63683?

This vulnerability allows remote clients to exploit trusted spoofable forwarded headers in Regular Labs products, enabling them to bypass critical location-based access controls. Attackers can manipulate the IP and GeoIP information, potentially compromising the security of applications relying on geographical restrictions for user access.

Affected Version(s)

Advanced Module Manager extension for Joomla 1.0.0-11.0.1

Conditional Content extension for Joomla 1.0.0-6.0.0

Content Templater Pro extension for Joomla 1.0.0-13.0.0

References

https://regularlabs.com/

product

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 22, 2026
Vulnerability Reserved
Jul 17, 2026

CVE-2026-63683 Data

JSON