CVE-2026-65755highCWE-524

CVE-2026-65755: falha de alta gravidade em regularlabs.com Articles Anywhere extension…

Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Articles Anywhere extension for Joomla+ Monitorar Users Anywhere extension for Joomla

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.4%
Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
regularlabs.com · Articles Anywhere extension for Joomlaregularlabs.com · Users Anywhere extension for Joomla
CVEs relacionadas — regularlabs.com Articles Anywhere extension…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-64793CRITICALJoomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensionsEPSS 0.4%CVE-2026-64792HIGHJoomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensionsEPSS 0.4%CVE-2026-64794MEDIUMJoomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensionsEPSS 0.4%CVE-2026-102802HIGHJoomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1EPSS 0.4%CVE-2026-63265HIGHJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpointsEPSS 0.2%