RCE in Fabrikar.com Fabrik Extension For Joomla

CVE-2026-66915

Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.6.7 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin.

Vulnerability class: RCE (Remote Code Execution)