CVE-2026-63685

CVE-2026-63685: Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension

Vendor Regularlabs.com
Product DB Replacer extension for Joomla
Weakness CWE-284
Published July 22, 2026
Last update July 23, 2026

CVSS base score

What the vulnerability does

01Description

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise.

Key dates

02Disclosure timeline

July 22, 2026 CVE published
July 23, 2026 Record updated

Related vulnerabilities

04Related CVE