Description
Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.
Published: 2026-07-22
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://regularlabs.com/ cve-icon
History

Tue, 28 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 23 Jul 2026 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Regularlabs.com
Regularlabs.com advanced Module Manager Extension For Joomla
Regularlabs.com conditional Content Extension For Joomla
Regularlabs.com content Templater Pro Extension For Joomla
Regularlabs.com rereplacer Extension Pro For Joomla
Vendors & Products Regularlabs.com
Regularlabs.com advanced Module Manager Extension For Joomla
Regularlabs.com conditional Content Extension For Joomla
Regularlabs.com content Templater Pro Extension For Joomla
Regularlabs.com rereplacer Extension Pro For Joomla

Thu, 23 Jul 2026 15:45:00 +0000

Type Values Removed Values Added
Description IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules. Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.

Wed, 22 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Description IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.
Title Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager
Weaknesses CWE-290
References

Subscriptions

Regularlabs.com Advanced Module Manager Extension For Joomla Conditional Content Extension For Joomla Content Templater Pro Extension For Joomla Rereplacer Extension Pro For Joomla
cve-icon MITRE

Status: PUBLISHED

Assigner: Joomla

Published:

Updated: 2026-07-28T05:33:18.651Z

Reserved: 2026-07-17T15:49:15.531Z

Link: CVE-2026-63683

cve-icon Vulnrichment

Updated: 2026-07-27T18:44:26.428Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-28T17:30:12Z

Weaknesses
  • CWE-290

    Authentication Bypass by Spoofing