Unauthenticated SQL Injection Flaw in Fabrik Extension by Joomla

CVE-2026-76571

What is CVE-2026-76571?

The Fabrik Extension for Joomla is susceptible to an unauthenticated SQL injection vulnerability. This issue arises when an attacker manipulates the condition parameter of a list filter, which is directly included in the SQL WHERE clause without adequate sanitization. As a result, an unauthorized individual can execute arbitrary SQL commands, gaining full read access to the underlying database. This vulnerability emphasizes the need for secure coding practices to prevent exploitation.

References