Skip to main content

Geoip Extension For Joomla EUVDEUVD-2026-47909

| CVE-2026-64875 MEDIUM
Authentication Bypass by Spoofing (CWE-290)
2026-07-23 Joomla GHSA-x4c7-x467-xc9c
Authentication Bypass Geoip Extension For Joomla
6.5
CVSS 3.1 · Vendor: Joomla
Share

Severity by source

Vendor (Joomla) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Primary rating from Vendor (Joomla) · only source for this CVE.

CVSS VectorVendor: Joomla

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low

Lifecycle Timeline

3
Analysis Generated
Jul 27, 2026 - 14:25 vuln.today
CVSS changed
Jul 27, 2026 - 14:22 NVD
6.5 (MEDIUM)
CVE Published
Jul 23, 2026 - 09:13 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass.

AnalysisAI

GeoIP rule bypass in Joomla Geo

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Geoip Extension For Joomla

View all
CVE-2026-65431 CRITICAL
9.8 Jul 23

Unsafe file extraction in the Joomla GeoIP extension (versions 1.0.0-6.3.8) enables remote code execution by writing fil
CVE-2026-64876 HIGH
8.8 Jul 23

Unauthorized database updates can be triggered via CSRF in the GeoIP extension for Joomla, affecting versions 1.0.0 thro
CVE-2026-63265 HIGH
8.0 Jul 22

We need to produce a JSON object with all fields as plain-text strings. Input: CVE-2026-63265. Description: Privileged R
CVE-2026-65430 HIGH
7.5 Jul 23

Information disclosure in the GeoIP extension for Joomla 1.0.0 through 6.3.8 exposes MaxMind API credentials directly in

Same weakness CWE-290 – Authentication Bypass by Spoofing

View all
CVE-2024-54085 CRITICAL
9.8
CVE-2023-50224 MEDIUM
6.5
CVE-2024-4358 CRITICAL POC
9.8
CVE-2018-5353 CRITICAL POC
9.8
CVE-2023-51350 CRITICAL POC
9.8
CVE-2022-3180 CRITICAL
9.8
CVE-2025-66570 CRITICAL POC
10.0
CVE-2025-49002 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

EUVD-2026-47909 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy