Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
References
Link Providers
https://regularlabs.com/ cve-icon
History

Wed, 22 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Description Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
Title Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions
Weaknesses CWE-524
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Joomla

Published:

Updated: 2026-07-22T20:40:58.877Z

Reserved: 2026-07-20T18:16:31.592Z

Link: CVE-2026-64792

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.