CVE-2026-64792
Description
Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
Metadata
Severity & Metrics
No CVSS data available.
Affected products (7)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| regularlabs.com | Articles Anywhere extension for Joomla | — | 1.0.0-18.0.2 |
| regularlabs.com | Conditional Content extension for Joomla | — | 1.0.0-6.0.0 |
| regularlabs.com | Modules Anywhere extension for Joomla | — | 1.0.0-8.4.1 |
| regularlabs.com | ReReplacer extension for Joomla | — | 1.0.0-15.0.3 |
| regularlabs.com | Snippets Pro extension for Joomla | — | 1.0.0-9.3.10 |
| regularlabs.com | Sourcerer extension for Joomla | — | 1.0.0-12.2.8 |
| regularlabs.com | Tabs & Accordions Pro extension for Joomla | — | 1.0.0-2.5.6 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| CWE-524 | cna | CWE-524 Use of Cache Containing Sensitive Information |
References (1)