Record summary

CVE-2026-64792 has a selected CVSS score of 7.5 (high).

Description

Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 27, 2026 · Source: CVE List

Affected products and versions

7
ProductSourceVersion rangeStatus

Default status: unaffected

CVE List1.0.0-18.0.2affected

Default status: unaffected

CVE List1.0.0-6.0.0affected

Default status: unaffected

CVE List1.0.0-8.4.1affected

Default status: unaffected

CVE List1.0.0-15.0.3affected

Default status: unaffected

CVE List1.0.0-9.3.10affected

Default status: unaffected

CVE List1.0.0-12.2.8affected

Default status: unaffected

CVE List1.0.0-2.5.6affected

References

2