01 Record

CVE-2026-76604

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.3

CriticalPUBLISHEDCNA: Joomla

Base score10.0 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

02 Description

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.3

Published

2026-08-22 14:18Z1 HR AGO

Last updated

2026-08-22 14:18Z1 HR AGO

Reserved

2026-08-19

Assigning CNA

Joomla

Record state

PUBLISHED

Severity

Critical (CVSS 10.0)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

8eaa1d1991b922b4a1e3d9fb386728a956a9125ea4aaa036b8261f74c701304c

VendorProductVersionsPlatforms

01 Record