Permission Bypass Vulnerability in Regular Labs Products
CVE-2026-64796

Currently unrated

Key Information:

Vendor: Regularlabs.com
Status: Sourcerer Extension For Joomla
Vendor: CVE Published:; 22 July 2026

🔔 Create Regularlabs.com Vulnerability Alert

What is CVE-2026-64796?

A security issue has been identified in Regular Labs products where the Free version does not require both the article creator and last modifier to be Super Users before executing PHP in articles. Additionally, the Pro version has inconsistencies in enforcing configured permissions for CSS, JavaScript, and PHP across various elements. This can lead to unauthorized execution of scripts and bypass detection mechanisms, jeopardizing system integrity.

Affected Version(s)

Sourcerer extension for Joomla 1.0.0-12.2.8

References

https://regularlabs.com/

product

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 22, 2026
Vulnerability Reserved
Jul 20, 2026

CVE-2026-64796 Data

JSON