Back to overview

CVE-2026-64794

Description
User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or restricted contact details.

Metadata

CVE ID
CVE-2026-64794
State
PUBLISHED
Assigner
Joomla
Reserved
2026-07-20 18:16 UTC
Published
2026-07-22 20:45 UTC
Last updated
2026-07-22 20:45 UTC
Primary CWE
CWE-284
CWE-284 Improper Access Control
Vendor / Product
regularlabs.com / Articles Anywhere extension for Joomla
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (2)
VendorProductPlatformVersions
regularlabs.com Articles Anywhere extension for Joomla — 1.0.0-18.0.2
regularlabs.com Users Anywhere extension for Joomla — 1.0.0-1.2.7
Weakness (CWE)
CWESourceDescription
CWE-284 cna CWE-284 Improper Access Control
References (1)
Back to overview