CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

NVD•added 2026/08/22 3:16 p.m.•18 views

CVE-2026-76598

Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjaxgetFolders in Fabrik 4.7.2 - The onAjaxgetFolders method of the elements model allows arbitrary directory listings...

8.7CVSS0.00465EPSS

SaveExploits0References1

Cvelist•added 2026/08/22 2:20 p.m.•43 views

CVE-2026-76598 Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2

8.7CVSS0.00465EPSS

SaveExploits0References1

EUVD•added 2026/08/22 2:20 p.m.•19 views

EUVD-2026-64325

8.7CVSS5.4AI score0.00465EPSS

SaveExploits0References1

CVE•added 2026/08/22 2:20 p.m.•28 views

CVE-2026-76598

Fabrik (a Joomla extension by fabrikar.com) versions prior to 4.7.2 are vulnerable to unauthenticated arbitrary directory listing via the onAjax_getFolders method in the elements model. An unauthenticated remote attacker can enumerate directory contents over the network with low complexity and no...

8.7CVSS6AI score0.00465EPSS

SaveExploits0References1

Vulnrichment•added 2026/08/22 2:20 p.m.•11 views

CVE-2026-76598 Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2

8.7CVSS6AI score0.00465EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/08/22 12:00 a.m.•5 views

CVE-2026-76598: Improper Access Control

8.7CVSS5.9AI score0.00465EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by