Unauthenticated Comment Modification in Joomla Extension from Fabrikar
CVE-2026-76609

6.9MEDIUM

Key Information:

Vendor

Fabrikar.com

Status
Fabrik Extension For Joomla
Vendor
CVE Published:
22 August 2026

What is CVE-2026-76609?

The Joomla extension from Fabrikar allows unauthenticated users to modify comments due to insufficient access control in the onUpdateComment endpoint. This flaw impacts versions of Fabrik prior to 4.7.2, exposing installations to unauthorized changes, which could undermine the integrity of user-generated content.

Affected Version(s)

Fabrik extension for Joomla 1.0.0-4.7.1

References

https://www.fabrikar.com/
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phil Taylor, mysites.guru
.