VULNERABILITY INTELLIGENCE
CVE-2026-74253
EPSS probability0.32%
CISA KEVNot currently listed
Published2026-08-17
Last modified2026-10-23
Description
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where that code originated.
Weakness classification
- security@joomla.org: CWE-94