CVE-2026-63685 — Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension

CVE-2026-63685

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension PUBLISHED

Description (CNA)

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise.

Affected (CNA)

Vendor / product	Versions
regularlabs.com / DB Replacer extension for Joomla	affected 1.0.0-8.2.7

CWE

CWE-284

References

https://regularlabs.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.