CVE-2026-63685 PUBLISHED

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension

Assigner: Joomla
Reserved: 17.07.2026 Published: 22.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise.

Product Status

Vendor regularlabs.com
Product DB Replacer extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-8.2.7 is affected

References

Problem Types

  • CWE-284 Improper Access Control CWE