CVE-2026-76603 in Extension

Riassunto

di MITRE • 22/08/2026

Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.3 - The inineedit form controller does not perform any access checks, disclosing items to unauthorized users.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: Joomla
• Prenotare: 19/08/2026
• Divulgazione: 22/08/2026
• Moderazione: accettato
• Voce: VDB-394354
• CPE: pronto
• CWE: CWE-285 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-76603
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76603
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-76603/