CVE-2026-64799

CVE-2026-64799 concerns a Joomla extension by Regular Labs (Articles Anywhere and Users Anywhere). The flaw allows an attacker-controlled image URL to trigger SSRF by requesting private/reserved network services, following unsafe redirects, and saving non-image responses without validating image ...