CVE-2026-64798 PUBLISHED

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension

Assigner: Joomla
Reserved: 20.07.2026 Published: 22.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

Product Status

Vendor regularlabs.com
Product IP Login extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-6.2.5 is affected

References

Problem Types

  • CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CWE