CVE Catalog
CVE-2026-64874
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
The Cache Cleaner Pro extension for Joomla! exposes CDN credentials in administrator request URLs.
Risk Assessment
An attacker with access to logs or network traffic can intercept CDN credentials, potentially leading to unauthorized access to CDN services.
Recommendation
Update the Cache Cleaner Pro extension and ensure credentials are not transmitted in URLs.
Original NVD description (English source)
Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs.