CVE-2026-64798

CVE-2026-64798: Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension

Vendor Regularlabs.com

Product IP Login extension for Joomla

Weakness CWE-338

Published July 22, 2026

Last update July 28, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

Key dates

02Disclosure timeline

July 22, 2026 CVE published

July 28, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-64798 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/338.html AskarLabs — CWE-338 write-up Use of Cryptographically Weak PRNG

Related vulnerabilities

CVE-2026-64798: Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension

01Description

02Disclosure timeline

03References

04Related CVE