Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-67282

Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8

Description

Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

fabrikar.com Fabrik extension for Joomla

Default version status: unaffected

  • 1.0.0-4.6.7affected

References