Back to overview

CVE-2026-64876

Description
Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates.

Metadata

CVE ID
CVE-2026-64876
State
PUBLISHED
Assigner
Joomla
Reserved
2026-07-20 18:46 UTC
Published
2026-07-23 09:12 UTC
Last updated
2026-07-23 09:12 UTC
Primary CWE
CWE-352
CWE-352 Cross-Site Request Forgery (CSRF)
Vendor / Product
regularlabs.com / GeoIP extension for Joomla
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
regularlabs.com GeoIP extension for Joomla — 1.0.0-6.3.8
Weakness (CWE)
CWESourceDescription
CWE-284 cna CWE-284 Improper Access Control
CWE-352 cna CWE-352 Cross-Site Request Forgery (CSRF)
References (1)
Back to overview