CVE-2026-64798 | Persistent URL login keys were also generated using a non-cr…

Description

Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

CVE ID: CVE-2026-64798
State: PUBLISHED
Assigner: Joomla
Reserved: 2026-07-20 18:16 UTC
Published: 2026-07-22 20:41 UTC
Last updated: 2026-07-22 20:41 UTC
Primary CWE: CWE-338
CWE-338 Use of Cryptographically Weak Pseudo-Random Number G…
Vendor / Product: regularlabs.com / IP Login extension for Joomla
Sources: cve.org · NVD

No CVSS data available.

Affected products (1)

Vendor	Product	Platform	Versions
regularlabs.com	IP Login extension for Joomla	—	1.0.0-6.2.5

Weakness (CWE)

CWE	Source	Description
CWE-338	cna	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

References (1)