CVE-2026-76606

Fabrik is a Joomla extension that is vulnerable to path traversal via its image element in versions prior to 4.7.3 . The CVSS 4.0 base score is 10.0 (CRITICAL) , indicating network-exploitable impact with no required privileges or user interaction, affecting confidentiality, integrity, and availa...

CVE-2026-76606 Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik 4.7.3 - ???...

CVE-2026-76607

Fabrik , a Joomla extension by fabrikar.com, is vulnerable to a missing ACL (Access Control List) check in its download element in versions prior to 4.7.3 . This flaw allows unauthenticated remote attackers to access download functionality without proper authorization, leading to high impact on c...