Is CVE-2026-64799 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-64799 being exploited in the wild.

How severe is CVE-2026-64799?

Informational severity, with a CVSS score of 0, published 23 July 2026.

Which products and versions are affected?

Regular Labs Articles Anywhere Pro 1.0.0-18.0.2; Regular Labs Users Anywhere Pro 1.0.0-1.2.7.

Is there a fix for CVE-2026-64799?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-64799 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-64799?

Check whether you run Regular Labs Articles Anywhere Pro or Regular Labs Users Anywhere Pro at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-64799: Regular Labs Joomla extensions SSRF and file write via image URLs

CVE-2026-64799 · Severity: info · CVSS 0 · Published 2026-07-23

Multiple Regular Labs extensions for the Joomla content management system contain a security flaw in how they handle image URLs. An attacker can provide a malicious link that forces the website to communicate with internal network services or download unauthorized files. This could lead to the exposure of private internal data or the placement of malicious files on the web server.

Vendors: Regular Labs.

Quick answers

Is CVE-2026-64799 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-64799 being exploited in the wild.
How severe is CVE-2026-64799?: Informational severity, with a CVSS score of 0, published 23 July 2026.
Which products and versions are affected?: Regular Labs Articles Anywhere Pro 1.0.0-18.0.2; Regular Labs Users Anywhere Pro 1.0.0-1.2.7.
Is there a fix for CVE-2026-64799?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-64799 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-64799?: Check whether you run Regular Labs Articles Anywhere Pro or Regular Labs Users Anywhere Pro at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the Regular Labs Articles Anywhere Pro and Users Anywhere Pro extensions for Joomla. The software fails to properly validate user-supplied image URLs, allowing them to request private or reserved network services and follow unsafe redirects. Furthermore, the application saves responses without verifying that the retrieved content is actually an image. This can be exploited by a remote attacker to access internal-only data or write attacker-controlled files into web-accessible directories on the server.

Affected products

Regular Labs Articles Anywhere Pro extension for Joomla 1.0.0-18.0.2
Regular Labs Users Anywhere Pro extension for Joomla 1.0.0-1.2.7

Timeline

2026-07-23: disclosed: CVE published by Joomla! Project

References

https://regularlabs.com/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.