Description
Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
Published:
2026-07-22
Score:
n/a
EPSS:
n/a
KEV:
No
Impact:
n/a
Action:
n/a
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
| Link | Providers |
|---|---|
| https://regularlabs.com/ |
|
History
Wed, 22 Jul 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors. | |
| Title | Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions | |
| Weaknesses | CWE-524 | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: Joomla
Published:
Updated: 2026-07-22T20:40:58.877Z
Reserved: 2026-07-20T18:16:31.592Z
Link: CVE-2026-64792
No data.
No data.
No data.
OpenCVE Enrichment
No data.
Weaknesses