CVE-2026-74253
NONE—CVSS v3
—CVSS v2
0.32%
EPSS (exploit probability)
CWE-94CWE
Description
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where that code originated.
Affected routers (0)
No routers currently mapped to this CVE in our database.