CVE-2026-64798CWE-338

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension

Critical · published July 22, 2026

CVSS v3.1
9.1
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00427 · 35.9th percentile
Weakness
CWE-338 · Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Published
2026-07-22T20:41Z
EPSS history
Timeline
  • 22 JUL 20:41Z
    Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension
    cvelistv5