CVE-2026-64792 describes a vulnerability in the Articles Anywhere extension for Joomla by regularlabs.com. The issue arises because the Smart Search indexing mechanism renders generated content using the indexing administrator's identity instead of a public guest identity. As a result, sensitive content that should be restricted to administrators or authorized users may be cached in the public search index, leading to unintended information disclosure. The vulnerability is classified under CWE-524 (Use of Cache Containing Sensitive Information). There is no CVSS score or vendor advisory indicating a patch or fix at this time.

Sensitive or administrator-only content may be exposed publicly through the search index, potentially allowing unauthorized users to access restricted information. This can lead to confidentiality breaches within affected Joomla sites using the vulnerable extension versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should consider disabling or limiting the use of the Smart Search indexing feature in the Articles Anywhere extension or restrict access to the search index results to trusted users only.