Skip to content
OpenAdvisories
High · 8.7 CVE-2026-76596 EUVD-2026-64323GHSA-9r9m-f5v7-fr59

Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2

Published Aug 22, 2026 · Updated Aug 24, 2026 · Assigned by Joomla

Description

Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table

Affected products

VendorProductAffectedFixed
fabrikar.com Fabrik extension for Joomla 1.0.0-4.7.1 —

References