CVE-2026-65755

HighCVSS 7.5

Published: 23/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

The Articles Anywhere and Users Anywhere extensions for Joomla! cache query results without a time component, causing content leakage beyond its publication period.

Risk Assessment

Content that should no longer be available (e.g., after expiry) may still be served to users from cache.

Recommendation

Update the Articles Anywhere and Users Anywhere extensions and clear cache after publication schedule changes.

Other vulnerabilities in Joomla Extension - Articles Anywhere / Users Anywhere

CVE-2026-64799High
The Articles Anywhere and Users Anywhere extensions for Joomla! download images from content-controlled URLs without validation, enabling SSRF and file writes to a web-accessible folder.

Original NVD description (English source)

Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable.