Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-66915 EUVD-2026-55159GHSA-ch8m-c7x9-7r7f

Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2

Published Aug 10, 2026 · Updated Aug 22, 2026 · Assigned by Joomla

Description

Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin.

Affected products

VendorProductAffectedFixed
fabrikar.com Fabrik extension for Joomla 1.0.0-4.7.1 —

References