CVE-2026-64797: Regularlabs.com IP Login Extension For Joomla

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.

Affected products

• Regularlabs.com IP Login Extension For Joomla: version 1.0.0-6.2.5 only

Published 2026-07-22. Last modified 2026-07-28.