CVE-2026-76609 - Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2

Back Back to CVE browser

MEDIUM

Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2

Published Aug 22, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.41%

Description

Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.

Affected products

Vendor Fabrikar.com Product Fabrik extension for Joomla Default
unaffected
Affected
- 1.0.0-4.7.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Fabrikar.com	Fabrik extension for Joomla	unaffected	Affected 1.0.0-4.7.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-64318
Advisory
https://www.fabrikar.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-64318		Advisory
https://www.fabrikar.com/		product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Joomla

Published Aug 22, 2026

Updated Aug 24, 2026

Reserved Aug 19, 2026

Link CVE-2026-76609

CISA Vulnrichment

Updated Aug 24, 2026

NVD

Status Deferred

Modified Aug 26, 2026

Link CVE-2026-76609

Red Hat

No data

ENISA EUVD

Assigner Joomla

Published Aug 22, 2026

Updated Aug 24, 2026

Link EUVD-2026-64318

GitHub

No data