Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-67282 EUVD-2026-57151GHSA-cr3m-f373-53gv

Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8

Published Aug 12, 2026 · Updated Aug 12, 2026 · Assigned by Joomla

Description

Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model.

Affected products

VendorProductAffectedFixed
fabrikar.com Fabrik extension for Joomla 1.0.0-4.6.7 —

References