CVE-2026-63685

Name of the Vulnerable Software and Affected Versions DB Replacer extension for Joomla (affected versions not specified)

Description An authorization bypass exists where administrator routes and replacement requests do not consistently require Super User permissions and a valid token. This allows an unauthorized backend user or a Cross-Site Request Forgery (CSRF) attack—a technique that forces an authenticated user to execute unwanted actions—to perform database replacements, which could lead to significant data corruption or full site compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.