CVE-2026-63683
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
The Regular Labs conditions manager for Joomla! trusts spoofable forwarded headers for IP and GeoIP conditions, allowing remote clients to bypass location-based rules.
Risk Assessment
Remote attackers can spoof an IP address from an allowed location, bypassing geo-restrictions and gaining unauthorized access to resources.
Recommendation
Update the Regular Labs conditions manager to a version that does not trust forwarded headers, and configure IP rules at the server level.
Other vulnerabilities in Regular Labs conditions manager
See all- CVE-2026-63281Medium
A stored XSS vulnerability in the Regular Labs conditions manager for Joomla allows stored condition values to execute HTML/JavaScript in administrator summaries.
- CVE-2026-63280High
The Regular Labs Conditions Manager for Joomla did not consistently check CSRF tokens or component/mapped-item permissions during condition administration. An unauthorized backend user or CSRF attack could modify conditions.
Original NVD description (English source)
Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.