CVE-2026-63685
NONE—CVSS v3
—CVSS v2
—
EPSS (exploit probability)
CWE-284CWE
Description
Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise.
Affected routers (0)
No routers currently mapped to this CVE in our database.