XML File Inclusion Vulnerability in ReReplacer by Regular Labs
CVE-2026-65754

Currently unrated

Key Information:

Vendor: Regularlabs.com
Status: Rereplacer Pro Extension For Joomla
Vendor: CVE Published:; 23 July 2026

🔔 Create Regularlabs.com Vulnerability Alert

What is CVE-2026-65754?

The XML file inclusion vulnerability in ReReplacer allows attackers to leverage misconfigured paths to access sensitive files outside the intended directory. This could lead to unauthorized data exposure, compromising the security of the web application and potentially affecting user data. Regular Labs has issued an update to mitigate this issue, and it is crucial for users to upgrade to the latest version to safeguard their systems.

Affected Version(s)

ReReplacer PRo extension for Joomla 1.0.0-15.0.3

References

https://regularlabs.com/

product

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 23, 2026
Vulnerability Reserved
Jul 22, 2026

CVE-2026-65754 Data

JSON