Back to overview

CVE-2026-64871

Description
Administrator URL purges did not consistently require a valid token and cache-management permission.

Metadata

CVE ID
CVE-2026-64871
State
PUBLISHED
Assigner
Joomla
Reserved
2026-07-20 18:35 UTC
Published
2026-07-23 09:14 UTC
Last updated
2026-07-23 09:14 UTC
Primary CWE
CWE-352
CWE-352 Cross-Site Request Forgery (CSRF)
Vendor / Product
regularlabs.com / Cache Cleaner extension for Joomla
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
regularlabs.com Cache Cleaner extension for Joomla — 1.0.0-9.7.6
Weakness (CWE)
CWESourceDescription
CWE-284 cna CWE-284 Improper Access Control
CWE-352 cna CWE-352 Cross-Site Request Forgery (CSRF)
References (1)
Back to overview