CVE-2026-64793CWE-284
Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions
Critical · published July 22, 2026
What it is
Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby expose content to visitors who lacked the required access.
The record
Technical detail
- CVSS v3.1
- 9.1 · CRITICAL
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00429 · 36.1th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2026-07-22T20:45Z
EPSS history
Timeline