Permission Bypass Vulnerability in Regular Labs Products
CVE-2026-64796

9.8CRITICAL

Key Information:

Vendor

Regularlabs.com

Status
Sourcerer Extension For Joomla
Vendor
CVE Published:
22 July 2026

What is CVE-2026-64796?

A security issue has been identified in Regular Labs products where the Free version does not require both the article creator and last modifier to be Super Users before executing PHP in articles. Additionally, the Pro version has inconsistencies in enforcing configured permissions for CSS, JavaScript, and PHP across various elements. This can lead to unauthorized execution of scripts and bypass detection mechanisms, jeopardizing system integrity.

Affected Version(s)

Sourcerer extension for Joomla 1.0.0-12.2.8

References

https://regularlabs.com/
product

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.