CVE-2026-76606
published 2026-08-22CVE-2026-76606: Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2.
PriorityP352critical10CVSS 4.0
AVNACLATNPRNUINVCHVIHVAHSCHSIHSAHEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.50%
40.1th percentile
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fabrikar.com | fabrik_extension_for_joomla | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
fabrikar Extension up to 4.7.2 path traversal
vuldb·2026-08-24·CVSS 10.0
CVE-2026-76606 [CRITICAL] fabrikar Extension up to 4.7.2 path traversal
A vulnerability was found in fabrikar Extension up to 4.7.2. It has been classified as critical. The impacted element is an unknown function. This manipulation causes path traversal.
This vulnerability is tracked as CVE-2026-76606. The attack is possible to be carried out remotely. No exploit exists.
GHSA
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???.
ghsa_unreviewed·2026-08-22
CVE-2026-76606 [CRITICAL] CWE-22 Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???.
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-22
Published