CVE-2026-76602 in Fabrik Extension

Tóm tắt

Bởi MITRE • 22/08/2026

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.3 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• chịu trách nhiệm: Joomla
• Đặt trước: 19/08/2026
• Tiết lộ: 22/08/2026
• Kiểm duyệt: được chấp nhận
• mục: VDB-394355
• CPE: sẵn sàng
• CWE: CWE-89 (Đã xác nhận)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: không
• Các hoạt động: thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-76602
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76602
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-76602/