What is the CVSS score of EUVD-2026-47815?

EUVD-2026-47815 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.2%.

Ip Login Extension For Joomla EUVD-2026-47815

| CVE-2026-64797 HIGH

Authentication Bypass by Spoofing (CWE-290)

2026-07-22 Joomla

Authentication Bypass Ip Login Extension For Joomla Regularlabs Com

7.5

CVSS 3.1 · Vendor: Joomla

Severity by source

Vendor (Joomla) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from Vendor (Joomla) · only source for this CVE.

CVSS VectorVendor: Joomla

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 28, 2026 - 18:30 vuln.today

CVSS changed

Jul 28, 2026 - 16:22 NVD

7.5 (HIGH)

CVE Published

Jul 22, 2026 - 20:44 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 22, 2026 - 20:44 cve.org

HIGH 7.5

DescriptionCVE.org

IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.

AnalysisAI

Authentication bypass via IP spoofing in the IP Login extension for Joomla allows unauthenticated attackers to impersonate mapped accounts. The extension trusts forwarded client-IP headers without requiring a trusted proxy, enabling remote attackers to spoof the IP used for automatic login. No active exploitation has been confirmed, but the vulnerability is automatable and carries high integrity impact.