CVE-2026-85188

Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14.2.0, ReReplacer (Pro) < 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the set is linked. The affected code accepts the database table and label-column names from the request. Although these names are quoted as SQL identifiers, they are not restricted to the tables and columns used by supported Regular Labs integrations. An attacker can therefore select a valid but unrelated database field. This is an authorization failure rather than SQL injection.

• CWE-200

• https://www.regularlabs.com/

Published

Sep 14, 2026

Last Modified

Sep 16, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-85181CAT uses Java String.hashCode as the sole integrity check fo…9.8
• CVE-2026-85182vhr through commit 03abbd3 fails to verify that the account …7.5
• CVE-2026-85183Taipy configures its socket.io server with wildcard CORS ori…9.3
• CVE-2026-85184@fastify/middie versions >= 9.1.0 and before 9.3.4 decide wh…9.1
• CVE-2026-85186A weakness has been identified in itsourcecode Online Medici…6.3
• CVE-2026-85187A security vulnerability has been detected in itsourcecode O…7.3
• CVE-2026-85189Joomla Extension - regularlabs.com - Privileged stored XSS v…7.5
• CVE-2026-8519Integer overflow in ANGLE in Google Chrome on Windows prior …8.8
• CVE-2026-85190Joomla Extension - regularlabs.com - Privileged stored XSS v…7.5
• CVE-2026-85191Joomla Extension - regularlabs.com - Privileged stored XSS v…7.5
• CVE-2026-85192Joomla Extension - regularlabs.com - Authenticated, privileg…9.4
• CVE-2026-85195Joomla Extension - regularlabs.com - Privileged stored XSS v…7.5