CVE Catalog
CVE-2026-64798
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.25%
16th percentile - higher than 16% of all known CVEs
Summary
The IP Login extension for Joomla! by regularlabs.com generates persistent URL login keys using a non-cryptographic random generator with insufficient entropy, making them predictable.
Risk Assessment
Attackers can predict or replay login URL keys, enabling unauthorized access to user accounts and potential session hijacking.
Recommendation
Immediately update the IP Login extension to a version that uses a cryptographically secure random generator.
Original NVD description (English source)
Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.