CVE-2026-64794 is an improper access control vulnerability (CWE-284) in the Articles Anywhere extension for Joomla by regularlabs.com. The flaw allows crafted content leveraging user tags, filters, and conditions to access restricted user fields insufficiently protected by the extension. This can lead to exposure of sensitive user data including authentication-related information and restricted contact details. The vulnerability affects versions 1.0.0 through 18.0.2 of the extension. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

Successful exploitation can result in unauthorized disclosure of sensitive user data such as authentication-related information and restricted contact details. This exposure could compromise user privacy and potentially aid further attacks that rely on leaked user parameters. The vulnerability does not impact integrity or availability but poses a confidentiality risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected extension or disabling it if possible to limit exposure. Monitor official channels from regularlabs.com for updates and patches addressing this vulnerability.