CVE-2026-63685: Regularlabs.com DB Replacer Extension For Joomla

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise.

Affected products

• Regularlabs.com DB Replacer Extension For Joomla: version 1.0.0-8.2.7 only

Published 2026-07-22. Last modified 2026-07-27.