Unauthenticated Data Exposure in Joomla Extension by Fabrikar
CVE-2026-76603

6.9MEDIUM

Key Information:

Vendor

Fabrikar.com

Status
Fabrik Extension For Joomla
Vendor
CVE Published:
22 August 2026

What is CVE-2026-76603?

The Joomla Extension by Fabrikar contains a vulnerability in the inlineedit form controller that allows unauthenticated users to access sensitive data. This defect arises from the lack of proper access controls, enabling unauthorized disclosure of items to users without authentication, potentially compromising the integrity and confidentiality of the information.

Affected Version(s)

Fabrik extension for Joomla 1.0.0-4.7.3

References

https://www.fabrikar.com/
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phil Taylor, mysites.guru
.