Is CVE-2026-65757 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-65757 being exploited in the wild.

How severe is CVE-2026-65757?

Informational severity, published 23 July 2026.

Which products and versions are affected?

Joomla! Joomla\! 1.0.0 through 8.4.1; Regular Labs Modules Anywhere 1.0.0 through 8.4.1.

Is there a fix for CVE-2026-65757?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-65757 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-65757?

Check whether you run Joomla! Joomla\! or Regular Labs Modules Anywhere at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-65757: Regular Labs Modules Anywhere improper access control in editor popup

CVE-2026-65757 · Severity: info · Published 2026-07-23

Regular Labs Modules Anywhere, a Joomla extension used to embed modules within content, contains a security flaw in its editor popup. An authenticated user could potentially view restricted module data they are not authorized to see. This occurs because the system fails to properly verify user permissions or request tokens when displaying information in the editor interface.

Technologies: Joomla! Joomla\!, Regular Labs Modules Anywhere. Vendors: Joomla!, Regular Labs.

Quick answers

Is CVE-2026-65757 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-65757 being exploited in the wild.
How severe is CVE-2026-65757?: Informational severity, published 23 July 2026.
Which products and versions are affected?: Joomla! Joomla\! 1.0.0 through 8.4.1; Regular Labs Modules Anywhere 1.0.0 through 8.4.1.
Is there a fix for CVE-2026-65757?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-65757 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-65757?: Check whether you run Joomla! Joomla\! or Regular Labs Modules Anywhere at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper access control and cross-site request forgery (CSRF) vulnerability exists in the Regular Labs Modules Anywhere extension for Joomla (versions 1.0.0 through 8.4.1). The editor popup component fails to adequately validate session tokens or specific module-level permissions before displaying data. An authenticated attacker could exploit this to access restricted module information that should be inaccessible to their user role. The vulnerability is tracked as CWE-284 and CWE-352.

Affected products

Regular Labs Modules Anywhere extension for Joomla 1.0.0 through 8.4.1

Timeline

2026-07-23: advisory: NVD published the CVE record based on Joomla! Project data.

References

https://regularlabs.com/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.