CVE-2026-65430

Deferred Deferred - Pending Action

MaxMind Credential Leakage in Joomla

Publication date: 2026-07-23

Last updated on: 2026-07-27

Assigner: Joomla! Project

Description

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-23

Last Modified

2026-07-27

Generated

2026-08-12

AI Q&A

2026-07-23

EPSS Evaluated

2026-08-11

NVD

CVE-2026-65430

EUVD

EUVD-2026-47916

Affected Vendors & Products

Vendor	Product	Version / Range
regularlabs	geoip_extension	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability involves MaxMind credentials being leaked in request URLs. This means sensitive authentication details were exposed in web addresses, potentially allowing unauthorized access to systems or data.

Detection Guidance

To detect this vulnerability, inspect web server logs for URLs containing MaxMind credentials. Look for requests to GeoIP extension endpoints with exposed credentials in query parameters. Check for unusual outbound requests to MaxMind API endpoints from your server.

Impact Analysis

If you use MaxMind services, attackers could exploit leaked credentials to gain unauthorized access to your systems, leading to data breaches, misuse of services, or further compromise of sensitive information.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA due to unauthorized data access or exposure. Organizations may face legal penalties, fines, or reputational damage for failing to protect credentials and sensitive data.

Mitigation Strategies

Rotate MaxMind credentials immediately and review all logs for unauthorized access. Remove credentials from URLs in requests and update any affected configurations.

Hi! I’m here to help you understand CVE-2026-65430. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70