Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.

Project Subscriptions

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
Link Providers
https://regularlabs.com/ cve-icon
History

Wed, 22 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Description Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
Title Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions
Weaknesses CWE-524
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Joomla

Published:

Updated: 2026-07-22T20:40:58.877Z

Reserved: 2026-07-20T18:16:31.592Z

Link: CVE-2026-64792

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses