Improper Authentication in Regular Labs Extensions for Joomla
CVE-2026-64871

5.4MEDIUM

Key Information:

Vendor
CVE Published:
23 July 2026

What is CVE-2026-64871?

An issue has been identified in Regular Labs extensions for Joomla, where administrator URL purges do not consistently enforce valid token requirements and cache-management permissions. This vulnerability can potentially allow unauthorized actions that compromise the integrity and performance of the affected system, posing risks to site security and management.

Affected Version(s)

Cache Cleaner extension for Joomla 1.0.0-9.7.6

References

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.