CVE-2026-64798 identifies a critical vulnerability in the IP Login extension for Joomla by regularlabs.com. The extension generates persistent login URL keys using a non-cryptographic random generator with insufficient entropy, classified under CWE-338 (Use of Cryptographically Weak PRNG). This flaw compromises the security of login URL keys, potentially allowing attackers to guess or reproduce them, leading to unauthorized access. The vulnerability affects all versions from 1.0.0 through 6.2.5. There is no vendor advisory or patch available at this time, and no known exploits have been reported in the wild.

The use of a weak PRNG for generating persistent login URL keys undermines the confidentiality and integrity of the authentication mechanism. Attackers could potentially predict or reproduce these keys, enabling unauthorized login without user credentials. This could lead to unauthorized access to user accounts or administrative functions within Joomla sites using the affected extension. The vulnerability does not impact system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling the IP Login extension or avoiding its use to mitigate risk. Monitor official channels from regularlabs.com for updates or patches addressing this vulnerability.