CVE-2026-64874: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in regularlabs.com Cache Cleaner Pro extension for Joomla
Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs.
AI Analysis
Technical Summary
CVE-2026-64874 is an information exposure vulnerability classified as CWE-200 in the Cache Cleaner Pro extension for Joomla. The issue involves CDN credentials being included in administrator request URLs, potentially allowing unauthorized actors to access sensitive data. The vulnerability affects versions from 1.0.0 up to and including 9.7.6. There is no CVSS score or vendor advisory indicating a fix or mitigation at this time.
Potential Impact
Exposure of CDN credentials in administrator request URLs can lead to unauthorized access to these credentials, potentially compromising the confidentiality of the CDN service and any data or services relying on it. This could facilitate further attacks or data leakage depending on how the credentials are used.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access to the Joomla administrator interface to trusted users only and monitor for any unusual activity related to CDN credential usage.
CVE-2026-64874: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in regularlabs.com Cache Cleaner Pro extension for Joomla
Description
Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-64874 is an information exposure vulnerability classified as CWE-200 in the Cache Cleaner Pro extension for Joomla. The issue involves CDN credentials being included in administrator request URLs, potentially allowing unauthorized actors to access sensitive data. The vulnerability affects versions from 1.0.0 up to and including 9.7.6. There is no CVSS score or vendor advisory indicating a fix or mitigation at this time.
Potential Impact
Exposure of CDN credentials in administrator request URLs can lead to unauthorized access to these credentials, potentially compromising the confidentiality of the CDN service and any data or services relying on it. This could facilitate further attacks or data leakage depending on how the credentials are used.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access to the Joomla administrator interface to trusted users only and monitor for any unusual activity related to CDN credential usage.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Joomla
- Date Reserved
- 2026-07-20T18:35:16.486Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a61dd669c2644c7f8c8ecbd
Added to database: 07/23/2026, 09:22:46 UTC
Last enriched: 07/23/2026, 09:38:42 UTC
Last updated: 07/23/2026, 21:19:25 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.