CVE-2026-76602 in Fabrik Extension

요약

\~에 의해 MITRE • 2026. 08. 22.

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.3 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 책임이 있는: Joomla
• 예약하다: 2026. 08. 19.
• 공개: 2026. 08. 22.
• 모더레이션: 수락
• 항목: VDB-394355
• CPE: 준비됨
• CWE: CWE-89 (확인됨)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: 아니요
• 활동: 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-76602
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76602
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-76602/