CVE-2026-64873 is a CWE-918 SSRF vulnerability in the Cache Cleaner Pro extension for Joomla from regularlabs.com. It allows an attacker to craft custom query URLs that can cause the server to make unauthorized requests to internal or reserved network services. This could potentially expose internal resources or services that are not intended to be accessible externally. The vulnerability affects versions 1.0.0 through 9.7.6. No CVSS score or vendor advisory with remediation details is available, and no known exploits have been reported.

An attacker exploiting this SSRF vulnerability could cause the server hosting the Cache Cleaner Pro extension to send requests to internal or reserved network services. This may lead to unauthorized access or information disclosure of internal network resources. The exact impact depends on the internal network configuration and what services are accessible from the vulnerable server. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the vulnerable extension or applying network-level controls to limit the server's ability to make arbitrary outbound requests. Monitor for updates from regularlabs.com regarding a security patch or official mitigation.