Is CVE-2026-65756 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-65756 being exploited in the wild.

How severe is CVE-2026-65756?

Informational severity, with a CVSS score of 0, published 23 July 2026.

Which products and versions are affected?

Regular Labs Keyboard Shortcuts 1.0.0 through 3.2.5.

Is there a fix for CVE-2026-65756?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-65756 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-65756?

Check whether you run Regular Labs Keyboard Shortcuts at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-65756: Regular Labs Keyboard Shortcuts for Joomla XSS in shortcut configuration

CVE-2026-65756 · Severity: info · CVSS 0 · Published 2026-07-23

The Keyboard Shortcuts extension for Joomla, which allows administrators to create hotkeys for common tasks, contains a security flaw in its configuration settings. This vulnerability allows the application to accept and execute unauthorized JavaScript code within the shortcut settings. If exploited, an attacker could potentially execute malicious scripts in the context of a user's browser, leading to unauthorized actions or data theft.

Vendors: Regular Labs.

Quick answers

Is CVE-2026-65756 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-65756 being exploited in the wild.
How severe is CVE-2026-65756?: Informational severity, with a CVSS score of 0, published 23 July 2026.
Which products and versions are affected?: Regular Labs Keyboard Shortcuts 1.0.0 through 3.2.5.
Is there a fix for CVE-2026-65756?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-65756 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-65756?: Check whether you run Regular Labs Keyboard Shortcuts at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Cross-Site Scripting (XSS) vulnerability exists in the Regular Labs Keyboard Shortcuts extension for Joomla (versions 1.0.0 through 3.2.5). The issue stems from improper neutralization of input during web page generation (CWE-79) within the shortcut configuration component. Specifically, the application accepts arbitrary inline JavaScript, which can be executed in the context of an authenticated user's session. An attacker with the ability to modify shortcut configurations could inject malicious scripts to perform actions on behalf of other users or exfiltrate sensitive information.

Affected products

Regular Labs Keyboard Shortcuts extension for Joomla 1.0.0 through 3.2.5

Timeline

2026-07-23: disclosed: CVE-2026-65756 published by the Joomla! Project.

References

https://regularlabs.com/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.