What is the CVSS score of EUVD-2026-47805?

EUVD-2026-47805 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Regular Labs Extension Manager Extension For Joomla EUVD-2026-47805

| CVE-2026-64791 HIGH

Cross-Site Request Forgery (CSRF) (CWE-352)

2026-07-22 Joomla

CSRF Regular Labs Extension Manager Extension For Joomla Regularlabs Com

8.8

CVSS 3.1 · Vendor: Joomla

Severity by source

Vendor (Joomla) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (Joomla) · only source for this CVE.

CVSS VectorVendor: Joomla

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 18:23 vuln.today

CVSS changed

Jul 27, 2026 - 18:22 NVD

8.8 (HIGH)

CVE Published

Jul 22, 2026 - 20:40 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 22, 2026 - 20:40 cve.org

HIGH 8.8

DescriptionCVE.org

Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or CSRF attack could install, update or remove extensions.

AnalysisAI

Insufficient access controls in Regular Labs Extension Manager for Joomla (versions 1.0.0–9.2.5) allow an unauthenticated attacker via CSRF or a low-privilege backend user to install, update, or remove extensions. Successful exploitation can lead to complete site compromise through the installation of a malicious extension. EPSS probability is low (0.13%) and no active exploitation or public exploit code has been identified.