RCE in Fabrikar.com Fabrik Extension For Joomla
CVE-2026-67282
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model.
Vulnerability class: RCE (Remote Code Execution)
Affected products
- Fabrikar.com Fabrik Extension For Joomla — versions 1.0.0-4.6.7
Weakness classification (CWE)
References
- security@joomla.org (product)