CVE-2026-64875 PUBLISHED

Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension

Assigner: Joomla
Reserved: 20.07.2026 Published: 23.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass.

Product Status

Vendor regularlabs.com
Product GeoIP extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-6.3.8 is affected

References

Problem Types

  • CWE-290 Authentication Bypass by Spoofing CWE