01 Record

CVE-2026-76605

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3

CriticalPUBLISHEDCNA: Joomla

Base score10.0 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

02 Description

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3

Published

2026-08-22 14:20Z1 HR AGO

Last updated

2026-08-22 14:20Z1 HR AGO

Reserved

2026-08-19

Assigning CNA

Joomla

Record state

PUBLISHED

Severity

Critical (CVSS 10.0)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

e6bb4e42c8bcf2ed659e0fc7a9b3de4288dc0c274d3baad0feb17a162664b192

VendorProductVersionsPlatforms

01 Record