CVE-2026-65755 is a vulnerability in the Articles Anywhere extension for Joomla by regularlabs.com. The flaw arises from improper handling of date-sensitive query cache keys, which lack a bounded time component. As a result, cached query results may persist beyond their valid publication or expiry dates, potentially exposing sensitive or restricted content after it should have been removed or hidden. This vulnerability is classified under CWE-524 (Use of Cache Containing Sensitive Information) and carries a CVSS 3.1 base score of 7.5, indicating high severity. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

The vulnerability allows cached content to remain accessible after its intended publication or expiry period, potentially exposing sensitive or restricted information to unauthorized users. This can lead to confidentiality breaches without affecting integrity or availability. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, increasing the risk of exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting the use of the affected caching features in the Articles Anywhere extension to prevent unintended content exposure.