CVE-2026-64798

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

Score

CVSS 3.1 9.1 Critical

Status

Deferred - security@joomla.org

Published

2026-07-22

Last modified

2026-10-24

Weaknesses

CWE-338

Affected products

• Ip Login Extension For Joomla (Regularlabs.com)

References

• https://regularlabs.com/