Insufficient Access Control in Regular Labs Product Allows Exposure of Sensitive User Data
CVE-2026-64794

6.5MEDIUM

Key Information:

Vendor

Regularlabs.com

Status
Articles Anywhere Extension For Joomla
Users Anywhere Extension For Joomla
Vendor
CVE Published:
22 July 2026

What is CVE-2026-64794?

A vulnerability in Regular Labs Extension allows the exploitation of insufficiently restricted user fields through user tags, filters, and conditions. This can lead to unauthorized access to sensitive information, including authentication-related data, raw user parameters, and restricted contact details. Attackers may craft specific content to exploit this flaw, compromising user privacy and security.

Affected Version(s)

Articles Anywhere extension for Joomla 1.0.0-18.0.2

Users Anywhere extension for Joomla 1.0.0-1.2.7

References

https://regularlabs.com/
product

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.