CVE-2026-64797 is an authentication bypass vulnerability (CWE-290) in the IP Login extension for Joomla by regularlabs.com. The extension improperly trusts forwarded client-IP headers without verifying that the source is a configured trusted proxy. This allows an attacker to spoof the IP address used for automatic login, potentially gaining unauthorized access by impersonating accounts mapped to those IPs. The vulnerability affects versions from 1.0.0 up to and including 6.2.5. No official fix or patch is currently documented, and no known exploits have been reported.

An attacker can bypass authentication by spoofing IP addresses, leading to unauthorized access to user accounts mapped to those IPs. This compromises account integrity and could allow attackers to perform actions with the privileges of the impersonated users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling the IP Login extension or restricting access to trusted networks to reduce exposure.