CVE-2026-64875

MediumCVSS 6.5

Published: 23/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

The GeoIP extension for Joomla! trusts spoofable forwarded client-IP headers, allowing GeoIP rule bypass.

Risk Assessment

An attacker can spoof an IP address from an allowed region, bypassing geographic restrictions.

Recommendation

Update the GeoIP extension and configure it to not trust client-forwarded headers.

Other vulnerabilities in Joomla Extension - GeoIP

See all

CVE-2026-65431Critical
The GeoIP extension for Joomla! extracts database update archives without path validation, leading to a Zipslip vulnerability.
CVE-2026-65430High
The GeoIP extension for Joomla! leaks MaxMind credentials in request URLs, leading to credential leakage.

Original NVD description (English source)

Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass.