CVE-2026-65430 is a CWE-200 vulnerability in the GeoIP extension for Joomla by regularlabs.com. The issue involves leakage of MaxMind credentials within request URLs, which exposes sensitive information to unauthorized actors. This vulnerability affects versions 1.0.0 through 6.3.8 of the extension. The CVSS 3.1 base score is 7.5, indicating high severity, with an attack vector of network, no privileges or user interaction required, and impact limited to confidentiality. No official patch or remediation level has been published as of the data provided.

The vulnerability allows unauthorized actors to obtain MaxMind credentials by intercepting request URLs, leading to exposure of sensitive information. This can compromise the confidentiality of the credentials, potentially enabling further unauthorized access or abuse of the MaxMind service. There is no indication of impact on integrity or availability. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid exposing URLs containing MaxMind credentials and consider removing or disabling the GeoIP extension if credential exposure risk is unacceptable.