CVE-2026-64876

CVE-2026-64876 affects the Joomla extension from regularlabs.com, specifically the GeoIP extension. The issue arises from inconsistent CSRF token checks and privilege checks, causing database-update requests to lack consistent token validation and Super User checks. This could permit unauthorized...

CVE-2026-64876 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension - Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates...

CVE-2026-65430 Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-65430

CVE-2026-65430 affects the Joomla Extension GeoIP by regularlabs.com. The vulnerability is caused by leakage of MaxMind credentials in request URLs, exposing credentials via the extension’s operations. Documents explicitly identify credential leakage in the GeoIP component; no details on affected...

CVE-2026-65430 Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-65431

The CVE describes a ZIP slip in the Joomla GeoIP extension by regularlabs.com. The root cause is that GeoIP database update archives are extracted without path validation, enabling unsafe file extractions. Affected product: Joomla Extension (GeoIP) from regularlabs.com. Documented impact is high ...

CVE-2026-65431 Joomla Extension - regularlabs.com - Zipslip in GeoIP extension

Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions...

CVE-2026-65431 Joomla Extension - regularlabs.com - Zipslip in GeoIP extension

Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions...