# CVE-2026-85188: Regular Labs Advanced Module Manager database disclosure in Conditions editor

Source: https://junglewise.ai/threats/cve-2026-85188-regular-labs-advanced-module-manager-database-disclosure-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-14. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85188 · Severity: info · Published 2026-09-14

Multiple Joomla extensions from Regular Labs contain a database access control flaw in their Conditions editor. An attacker can craft requests to read data from unrelated database tables and columns that should not be accessible. This could lead to exposure of sensitive site data, user credentials, or customer information stored in the Joomla database.

Technologies: [Regular Labs Advanced Module Manager](https://junglewise.ai/threats/technologies/advanced-module-manager), [Regular Labs Conditional Content](https://junglewise.ai/threats/technologies/conditional-content), [Regular Labs ReReplacer](https://junglewise.ai/threats/technologies/rereplacer). Vendors: [Regular Labs](https://junglewise.ai/threats/vendors/regular-labs).

## Quick answers

**Is CVE-2026-85188 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85188 being exploited in the wild.

**How severe is CVE-2026-85188?** Informational severity, published 14 September 2026.

**Which products and versions are affected?** Regular Labs Advanced Module Manager Free, Pro < 12.1.0; Regular Labs Conditional Content Free, Pro < 8.0.0; Regular Labs Content Templater Pro < 14.2.0; Regular Labs ReReplacer Pro < 16.2.0.

**Is there a fix for CVE-2026-85188?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-85188 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-85188?** Check whether you run Regular Labs Advanced Module Manager, Regular Labs Conditional Content, Regular Labs Content Templater or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Conditions editor in affected Regular Labs extensions accepts database table and column names from user requests without proper authorization validation. Although the table and column names are properly quoted as SQL identifiers (preventing SQL injection), the code does not restrict which database tables and columns can be accessed. An attacker can specify any valid but unrelated database field to read data. The vulnerability requires network access to the vulnerable endpoint and affects Advanced Module Manager (Free, Pro) versions before 12.1.0, Conditional Content (Free, Pro) versions before 8.0.0, Content Templater (Pro) versions before 14.2.0, and ReReplacer (Pro) versions before 16.2.0. This is an authorization bypass rather than traditional SQL injection. Patched versions are available.

## Affected products

- Regular Labs Advanced Module Manager Free, Pro < 12.1.0
- Regular Labs Conditional Content Free, Pro < 8.0.0
- Regular Labs Content Templater Pro < 14.2.0
- Regular Labs ReReplacer Pro < 16.2.0

## Timeline

- 2026-09-14: disclosed

## References

- [https://www.regularlabs.com/](https://www.regularlabs.com/)

## Related threats

- [Regular Labs Conditional Content authenticated remote code execution in Joomla](https://junglewise.ai/threats/cve-2026-85192-regular-labs-conditional-content-authenticated-remote-code)
- [Regular Labs Joomla extensions sensitive information disclosure in Smart Search](https://junglewise.ai/threats/cve-2026-64792-regular-labs-joomla-extensions-sensitive-information-disclosure)
- [Regular Labs Joomla extensions improper access control and CSRF](https://junglewise.ai/threats/cve-2026-63684-regular-labs-joomla-extensions-improper-access-control-and-csrf)
- [Regular Labs Joomla extensions location bypass via IP spoofing](https://junglewise.ai/threats/cve-2026-63683-regular-labs-joomla-extensions-location-bypass-via-ip-spoofing)
- [Regular Labs Joomla Extensions stored XSS in administrator summaries](https://junglewise.ai/threats/cve-2026-63281-regular-labs-joomla-extensions-stored-xss-in-administrator)