CVE-2026-63265

HighCVSS 8.0/10Last modified Oct 24, 2026

Description

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284CWE-352

Affected software

VendorProductVersions
regularlabs.comAdvanced Module Manager extension for Joomla1.0.0-11.0.1
regularlabs.comArticles Anywhere extension for Joomla1.0.0-18.0.2
regularlabs.comArticles Field extension for Joomla1.0.0-4.7.1
regularlabs.comBetter Frontend Link extension for Joomla1.0.0-2.2.5
regularlabs.comCache Cleaner extension for Joomla1.0.0-9.7.6
regularlabs.comCDN for Joomla extension for Joomla1.0.0-7.3.7
regularlabs.comConditional Content extension for Joomla1.0.0-6.0.0
regularlabs.comContent Templater extension for Joomla1.0.0-13.0.0
regularlabs.comDB Replacer extension for Joomla1.0.0-8.2.7
regularlabs.comEmail Protector extension for Joomla1.0.0-6.3.7
regularlabs.comRegular Labs Extension Manager extension for Joomla1.0.0-9.2.5
regularlabs.comGeoIP extension for Joomla1.0.0-6.3.8
regularlabs.comIP Login extension for Joomla1.0.0-6.2.5
regularlabs.comKeyboard Shortcuts extension for Joomla1.0.0-3.2.5
regularlabs.comModals extension for Joomla1.0.0-15.0.0
regularlabs.comModules Anywhere extension for Joomla1.0.0-8.4.1
regularlabs.comQuick Index extension for Joomla1.0.0-4.3.6
regularlabs.comReReplacer extension for Joomla1.0.0-15.0.3
regularlabs.comSnippets extension for Joomla1.0.0-9.3.10
regularlabs.comSourcerer extension for Joomla1.0.0-12.2.8
regularlabs.comTooltips extension for Joomla1.0.0-9.4.7
regularlabs.comUsers Anywhere extension for Joomla1.0.0-1.2.7
regularlabs.comWhat? Nothing! extension for Joomla1.0.0-17.2.5

References

Timeline

Published
Jul 22, 2026
Last modified
Oct 24, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-632666.8LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document couCVE-2026-632676.7LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while CVE-2026-632686.7LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name CVE-2026-632696.7LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLCVE-2026-63274.3IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special CVE-2026-632706.7URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated CVE-2026-632725.4LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that caCVE-2026-632735.4LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryptionCVE-2026-632745.4LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was takenCVE-2026-632755.4LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The nCVE-2026-632765.4LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embeCVE-2026-632778.5LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java datab
CVE-2026-63265: High severity, CVSS 8.0 | Vulnix