CVE-2026-64791 PUBLISHED

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager

Assigner: Joomla
Reserved: 20.07.2026 Published: 22.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or CSRF attack could install, update or remove extensions.

Product Status

Vendor regularlabs.com
Product Regular Labs Extension Manager extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-9.2.5 is affected

References

Problem Types

  • CWE-352 Cross-Site Request Forgery (CSRF) CWE
  • CWE-284 Improper Access Control CWE