CVE-2026-64791 — Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Mana…

CVE-2026-64791

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager PUBLISHED

Description (CNA)

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or CSRF attack could install, update or remove extensions.

Affected (CNA)

Vendor / product	Versions
regularlabs.com / Regular Labs Extension Manager extension for Joomla	affected 1.0.0-9.2.5

CWE

CWE-352, CWE-284

References

https://regularlabs.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.