CVE-2026-65755

Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable...

CVE-2026-64799

Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder...

CVE-2026-64794

CVE-2026-64794 affects Joomla extensions from Regular Labs: Users Anywhere and Articles Anywhere. The issue arises because user tags, filters, and conditions allowed access to insufficiently restricted user fields, enabling crafted content to expose authentication-related data, raw user parameter...