CVE-2026-64792 is a vulnerability classified as CWE-524 (Use of Cache Containing Sensitive Information) in the Articles Anywhere extension for Joomla by regularlabs.com. The issue arises because the Smart Search indexing process may render generated content using the indexing administrator’s identity rather than a public guest identity. As a result, restricted or administrator-only content can be cached in the public search index, leading to unintended disclosure of sensitive information to unauthorized visitors. The affected versions range from 1.0.0 up to 18.0.2. No official patch or remediation level has been provided by the vendor at this time.

The vulnerability allows unauthorized disclosure of sensitive or restricted content that should only be accessible to administrators or authorized users. This can lead to exposure of confidential information through the public search index, potentially compromising data confidentiality. There is no indication of impact on integrity or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor regularlabs.com and Joomla advisories for updates. Until a patch is available, consider disabling or restricting the Smart Search indexing feature or limiting access to the search index to prevent exposure of sensitive content.