PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-65756 regularlabs.com CVE debrief

The CVE-2026-65756 vulnerability is a cross-site scripting (XSS) issue in the Joomla Extension - regularlabs.com - Keyboard Shortcuts extension. The extension accepted arbitrary inline JavaScript in its shortcut configuration. This vulnerability has a CVSS score of 6.1 and a severity of MEDIUM. Defenders responsible for Joomla installations should be aware of this vulnerability and assess the exposure of their systems to potential XSS attacks. The evidence for this vulnerability comes from the CVE Program record and the NVD vulnerability detail page.

Vendor
regularlabs.com
Product
Keyboard Shortcuts extension for Joomla
CVSS
MEDIUM 6.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-23
Original CVE updated
2026-10-24
Advisory published
2026-07-23
Advisory updated
2026-10-24

Who should care

Defenders responsible for Joomla installations should be aware of this vulnerability and assess the exposure of their systems to potential XSS attacks.

Why it matters

The CVE-2026-65756 vulnerability is a cross-site scripting (XSS) issue in the Joomla Extension - regularlabs.com - Keyboard Shortcuts extension. Defenders should prioritize verifying the presence of this vulnerability in their Joomla installations and assess the exposure of their systems to potential XSS attacks.

  • Defenders need to verify the presence of this vulnerability in their Joomla installations
  • Defenders need to assess the exposure of their systems to potential XSS attacks
  • Defenders need to consider updating the extension to a version that addresses this vulnerability

Technical summary

The CVE-2026-65756 vulnerability is a cross-site scripting (XSS) issue in the Joomla Extension - regularlabs.com - Keyboard Shortcuts extension. The extension accepted arbitrary inline JavaScript in its shortcut configuration. This vulnerability has a CVSS score of 6.1 and a severity of MEDIUM.

Defensive priority

Defenders should prioritize verifying the presence of this vulnerability in their Joomla installations and assess the exposure of their systems to potential XSS attacks.

Recommended defensive actions

  • Verify the presence of the Keyboard Shortcuts extension in your Joomla installations
  • Assess the exposure of your systems to potential XSS attacks
  • Consider updating the extension to a version that addresses this vulnerability

Evidence notes

The evidence for this vulnerability comes from the CVE Program record and the NVD vulnerability detail page. The CVE Program record provides source-provided CVE metadata, while the NVD vulnerability detail page offers a source-specific vulnerability assessment.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-65756 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-65756

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-65756 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-65756

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.