Vulnerability Bulletins

CVE-2026-64797

   
Affected software JOOMLA
 
Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-64797