Insufficient Access Control in Regular Labs Product Allows Exposure of Sensitive User Data
CVE-2026-64794
Currently unrated
What is CVE-2026-64794?
A vulnerability in Regular Labs Extension allows the exploitation of insufficiently restricted user fields through user tags, filters, and conditions. This can lead to unauthorized access to sensitive information, including authentication-related data, raw user parameters, and restricted contact details. Attackers may craft specific content to exploit this flaw, compromising user privacy and security.
Affected Version(s)
Articles Anywhere extension for Joomla 1.0.0-18.0.2
Users Anywhere extension for Joomla 1.0.0-1.2.7
