CVE-2026-65757 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...

CVE-2026-64876

CVE-2026-64876 affects the Joomla extension from regularlabs.com, specifically the GeoIP extension. The issue arises from inconsistent CSRF token checks and privilege checks, causing database-update requests to lack consistent token validation and Super User checks. This could permit unauthorized...

Cisco IOS 12.4 HTTP Server Cross-Site Request Forgery (CVE-2008-4128)

According to its self-reported version, Cisco IOS 12.4 is affected by multiple cross-site request forgery CSRF vulnerabilities in the HTTP administration component. An unauthenticated, remote attacker can exploit these by persuading an authenticated user to follow a malicious link, allowing...

CVE-2026-63684

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks...

CVE-2026-63265

CVE-2026-63265 affects Joomla via Regular Labs extension. The issue: inconsistent CSRF token checks and privilege checks on multiple Regular Labs AJAX endpoints. This allowed authenticated low-privilege users or CSRF attackers to perform lookups or mutations outside their authorization. Exploitat...

EUVD-2026-47814

Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization...

CVE-2026-63685

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially...

EUVD-2026-47813

Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise...

CVE-2026-63685

The CVE describes an authorization bypass affecting the Joomla extension DB Replacer from regularlabs.com. The vulnerability arises because Administrator routes and replacement requests did not consistently require Super User permission and a valid token, enabling an unauthorized backend user or ...

CVE-2026-63280 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions...

CVE-2026-63280 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions...

CVE-2026-63280

CVE-2026-63280 concerns a Joomla extension from Regular Labs, specifically the Conditions Manager. The issue is described as inconsistent CSRF token checks and privilege checks within the Conditions administration, meaning that tokens and mapped-item/ component permissions were not consistently e...

EUVD-2026-47805

Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or CSRF attack could install, update or remove extensions...

CVE-2026-64791

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or...

CVE-2026-64791

Summary: CVE-2026-64791 affects Joomla Extensions by Regular Labs (Regular Labs Extension Manager). The issue is Inconsistent CSRF token checks and privilege checks on administrator routes and during install/update/uninstall processing, potentially letting an unauthorized backend user or CSRF att...

CVE-2026-64791 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or...

CVE-2026-64791 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or...

CVE-2026-63684 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks...

PT-2026-63500

Name of the Vulnerable Software and Affected Versions Regular Labs extension affected versions not specified Description Administrator actions, editor popups, and import/export requests lack consistent token, item-permission, and input-validation checks. This allows unauthorized backend users or...

PT-2026-63502

Name of the Vulnerable Software and Affected Versions Regular Labs Extension Manager affected versions not specified Description Administrator routes and the processing of installation, updates, and uninstallation did not consistently enforce installation and component-management permissions. Thi...