{"id":"CVE-2026-64797","aliases":["EUVD-2026-47815","GHSA-4hf8-pxr9-gc7w"],"status":"published","title":"Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension","description":"Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00346,"percentile":0.28437,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-290"],"published":"2026-07-22T20:44:08Z","modified":"2026-10-24T13:10:00Z","products":[{"vendor":"regularlabs.com","product":"ip login extension for joomla"}],"references":[{"url":"https://regularlabs.com/","tags":["product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64797"},{"url":"https://regularlabs.com"},{"url":"https://github.com/advisories/GHSA-4hf8-pxr9-gc7w"}],"sources":{"cve":[{"id":"CVE-2026-64797","title":"Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension","description":"Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.","status":"published","published":"2026-07-22T20:44:08.843Z","modified":"2026-07-29T05:39:44.152Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:19:58.214427Z"}],"euvd":[{"id":"EUVD-2026-47815","description":"Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.","status":"published","published":"2026-07-22T20:44:08Z","modified":"2026-07-29T05:39:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T18:02:30.59681Z"}],"ghsa":[{"id":"GHSA-4hf8-pxr9-gc7w","title":"IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy....","description":"IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.","status":"published","published":"2026-07-22T21:32:09Z","modified":"2026-07-28T18:32:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T15:09:52.627235Z"}],"nvd":[{"id":"CVE-2026-64797","description":"Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.","status":"published","published":"2026-07-22T21:18:10.87Z","modified":"2026-10-24T13:10:00.147Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:12:32.089897Z"}]}}