Unauthorized Updates in Regular Labs Products Due to Insufficient Checks
CVE-2026-64876

8.8HIGH

Key Information:

Vendor

Regularlabs.com

Status
Geoip Extension For Joomla
Vendor
CVE Published:
23 July 2026

What is CVE-2026-64876?

A significant vulnerability in Regular Labs products arises from the lack of consistent token and Super User checks during database-update requests. This oversight may allow unauthorized entities to perform updates, jeopardizing the integrity and security of the database. As such, immediate attention is required to mitigate potential unauthorized access and protect sensitive data.

Affected Version(s)

GeoIP extension for Joomla 1.0.0-6.3.8

References

https://regularlabs.com/
product

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.