CVE-2026-76603 in Extension

Sumário

de MITRE • 22/08/2026

Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.3 - The inineedit form controller does not perform any access checks, disclosing items to unauthorized users.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsável: Joomla
• Reservar: 19/08/2026
• Divulgação: 22/08/2026
• Moderação: aceite
• Entrada: VDB-394354
• CPE: pronto
• CWE: CWE-285 (confirmado)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-76603
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76603
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-76603/