CVE Catalog

CVE-2026-64873

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.27%

19th percentile - higher than 19% of all known CVEs

Summary

The Cache Cleaner Pro extension for Joomla! (from regularlabs.com) is vulnerable to Server-Side Request Forgery (SSRF). Custom query URLs can access internal or reserved network services.

Risk Assessment

An attacker can exploit SSRF to scan the internal network, access sensitive services, or launch further attacks on the infrastructure.

Recommendation

Update the Cache Cleaner Pro extension to the latest version. Restrict access to the extension to trusted administrators and consider firewall rules blocking outbound requests to internal IP addresses.

Original NVD description (English source)

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS