CVE-2026-76604 — Vulnerability intelligence

fabrikar.com — Fabrik extension for Joomla

Published: 2026-08-22T14:18:07.007Z

CVSS

10

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP form element is vulnerable to the execution of user provided codes.

Sources

• CVE-2026-76604
• Original advisory
• CVE-2026-76604