Quick answers
- Is CVE-2026-65755 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-65755 being exploited in the wild.
- How severe is CVE-2026-65755?
- Informational severity, published 23 July 2026.
- Which products and versions are affected?
- Regular Labs Articles Anywhere 1.0.0-18.0.2; Regular Labs Users Anywhere 1.0.0-1.2.7.
- Is there a fix for CVE-2026-65755?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-65755 attacked?
- It is attacked over the network, in a software library.
- Am I affected by CVE-2026-65755?
- Check whether you run Regular Labs Articles Anywhere or Regular Labs Users Anywhere at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is classified as CWE-524 (Use of Cache Containing Sensitive Information). In affected versions of the Articles Anywhere and Users Anywhere extensions for Joomla, date-sensitive query cache keys do not include a bounded time component. This flaw causes cached results to remain valid even after a publication or expiry boundary has passed. Consequently, an attacker or general user could access content via the cache that should have been rendered unavailable by the system's time-based access controls. The issue affects Articles Anywhere versions 1.0.0 through 18.0.2 and Users Anywhere versions 1.0.0 through 1.2.7.
Affected products
- Regular Labs Articles Anywhere extension for Joomla 1.0.0-18.0.2
- Regular Labs Users Anywhere extension for Joomla 1.0.0-1.2.7
Timeline
- 2026-07-23: disclosed: CVE published by Joomla! Project