Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 40 MIN AGO
T-40M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-76607
Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.3
Critical
PUBLISHED
CNA: Joomla
Base score
10.0
CVSS v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
View raw JSON
CVE Program record
02
Description
CNA: Joomla
Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.3
03
Metadata
SCHEMA: 5.2
Published
2026-08-22 14:15Z
1 HR AGO
Last updated
2026-08-22 14:15Z
1 HR AGO
Reserved
2026-08-19
Assigning CNA
Joomla
Record state
PUBLISHED
Severity
Critical (CVSS 10.0)
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weaknesses
CWE-284
Improper Access Control
Pillar
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
e32d4865d28e4b0d4fe57f1d55c8e9fcdb78c20c689a9ca00018097fcf8cb30d
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
fabrikar.com
Fabrik extension for Joomla
1.0.0-4.7.3
—
05
References
REFS: 1
www.fabrikar.com
https://www.fabrikar.com/
product