CVE-2026-64791
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager
CVSS Score
8.8
EPSS Score
0.1%
EPSS Percentile
1th
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or CSRF attack could install, update or remove extensions.
| CWE | CWE-352 CWE-284 |
| Vendor | regularlabs.com |
| Product | regular labs extension manager extension for joomla |
| Published | Jul 22, 2026 |
| Last Updated | Jul 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for regularlabs.com regular labs extension manager extension for joomla
Be the first to know when new high vulnerabilities affecting regularlabs.com regular labs extension manager extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
regularlabs.com / Regular Labs Extension Manager extension for Joomla
1.0.0-9.2.5