CVE-2026-64798: Regularlabs.com IP Login Extension For Joomla

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

Affected products

• Regularlabs.com IP Login Extension For Joomla: version 1.0.0-6.2.5 only

Published 2026-07-22. Last modified 2026-07-27.