Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-64873: Joomla Cache Cleaner Pro - Unauthorized Network Access
CVE-2026-64873 · published 2 months ago
Summary
A security issue in Joomla's Cache Cleaner Pro extension allows attackers to access internal network services. This could be used to steal sensitive information or disrupt the website. Update the extension to the latest version to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| regularlabs.com | cache cleaner pro extension for joomla | 1.0.0-9.7.6 |
Original advisory text
Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension
Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services.
References
- https://regularlabs.com/ product
Severity
9.8
Critical
Exploitation
EPSS <1%
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published23 Jul 2026
Updated27 Sep 2026
First seen23 Jul 2026
Track software like this
Free during beta