CVE-2026-64793
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
The Articles Anywhere and Modules Anywhere extensions for Joomla allow content tags to use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author can expose content to visitors lacking required access.
Risk Assessment
Unauthorized access to restricted content, potentially leading to information disclosure or policy violation.
Recommendation
Update the Articles Anywhere and Modules Anywhere extensions to the latest version to prevent access bypass.
Original NVD description (English source)
Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby expose content to visitors who lacked the required access.