CVE-2026-64873 Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...

CVE-2026-64873

CVE-2026-64873 affects the Joomla Extension Cache Cleaner Pro from Regular Labs. The issue is described as an SSRF vulnerability where custom query URLs could reach internal or reserved network services, implying a high-severity impact (CVSS: 3.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9...

CVE-2026-64873 Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...

CVE-2026-64871 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission...

CVE-2026-64871

CVE-2026-64871 affects the Joomla extension Cache Cleaner from Regular Labs. The report describes inconsistent CSRF token checks and privilege checks for administrator URL purge actions, meaning those actions did not consistently require a valid token and the necessary cache-management permission...

CVE-2026-64871 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission...

CVE-2026-64872

The CVE-2026-64872 entry concerns a Joomla extension from regularlabs.com, specifically the Cache Cleaner Pro extension. The vulnerability is a path traversal issue where custom purge and log paths could escape the site webroot directory. Documents consistently reference this path traversal flaw ...

CVE-2026-64872 Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

CVE-2026-64872 Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

CVE-2026-64874

CVE-2026-64874 affects the Joomla extension Cache Cleaner Pro from regularlabs.com. The underlying issue is exposure of CDN credentials in administrator request URLs, enabling credential leakage. The published metrics indicate a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no user ...

CVE-2026-64874 Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

Path Traversal

Robocode is vulnerable to Path Traversal. The vulnerability is due to improper sanitization of file paths in the recursivelyDelete method of the CacheCleaner component, allowing attackers to manipulate file paths and traverse directories to delete arbitrary files on the system...

EUVD-2025-201886

Robocode vulnerable to Directory Traversal in recursivelyDelete Method...

Robocode vulnerable to Directory Traversal in recursivelyDelete Method

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by...

GHSA-J8R2-47RX-QHW4 Robocode vulnerable to Directory Traversal in recursivelyDelete Method

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by...

CVE-2025-14306

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by...

CVE-2025-14306 Directory Traversal in Robocode's CacheCleaner Component

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by...

CVE-2025-14306

The CVE-2025-14306 entry concerns Robocode 1.9.3.6, where the CacheCleaner component’s recursivelyDelete method does not properly sanitize file paths, enabling directory traversal that can lead to arbitrary file deletions. Affected component: CacheCleaner; root cause: insufficient path sanitizati...

CVE-2025-14306 Directory Traversal in Robocode's CacheCleaner Component

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by...

CVE-2025-14306 Directory Traversal in Robocode's CacheCleaner Component

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by...