CVE-2026-64874

Deferred Deferred - Pending Action

CDN Credentials Exposure in Joomla Administrator URLs

Publication date: 2026-07-23

Last updated on: 2026-07-27

Assigner: Joomla! Project

Description

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-23

Last Modified

2026-07-27

Generated

2026-08-12

AI Q&A

2026-07-23

EPSS Evaluated

2026-08-11

NVD

CVE-2026-64874

EUVD

EUVD-2026-47914

Affected Vendors & Products

Vendor	Product	Version / Range
regular_labs	advanced_module_manager	*
regular_labs	articles_anywhere	*
regular_labs	cache_cleaner	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability involves CDN credentials being exposed in administrator request URLs. This means sensitive access keys or tokens for a Content Delivery Network were visible in web addresses used by administrators, potentially allowing unauthorized access to CDN resources.

Detection Guidance

To detect this vulnerability, inspect web server logs for administrator URLs containing CDN credentials in Cache Cleaner Pro extension requests. Look for exposed credentials in query parameters of administrator request URLs.

Impact Analysis

If exploited, attackers could gain access to your CDN credentials. This may lead to unauthorized use of your CDN services, data breaches, or disruption of content delivery. It could also allow attackers to intercept or manipulate traffic routed through the CDN.

Compliance Impact

Exposure of CDN credentials could violate data protection requirements under GDPR or HIPAA by enabling unauthorized access to personal or sensitive data. This may result in compliance violations, legal penalties, or reputational damage due to compromised data integrity or confidentiality.

Mitigation Strategies

Review administrator request URLs for exposed CDN credentials. Remove any credentials from URLs and store them securely. Rotate any exposed credentials immediately.

Hi! I’m here to help you understand CVE-2026-64874. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70