CVE-2026-64798 identifies a vulnerability in the IP Login extension for Joomla developed by regularlabs.com, where persistent URL login keys are generated using a non-cryptographic random generator with insufficient entropy. This use of a weak PRNG (classified under CWE-338) compromises the strength of the login keys, potentially making them easier to predict or reproduce. The vulnerability affects versions from 1.0.0 up to and including 6.2.5. No CVSS score or vendor advisory with remediation details is available, and no known exploits have been reported.

The use of a weak pseudo-random number generator to generate persistent login keys can reduce the security of authentication mechanisms by making keys more predictable. This could potentially allow attackers to guess or reproduce login keys, undermining user session security. However, no known exploits have been reported, and the actual impact depends on how these keys are used within the application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling the IP Login extension or limiting its use to trusted environments. Monitoring for updates from regularlabs.com and Joomla is recommended to apply any forthcoming patches promptly.