CVE Catalog
CVE-2026-67282
CriticalCVSS 10.0Summary
The Joomla extension Fabrik before version 4.6.8 has an unauthenticated remote code execution vulnerability. An attacker can execute arbitrary code by using the frontend listfilter model.
Risk Assessment
An unauthenticated attacker can execute arbitrary code on the server, potentially leading to system compromise.
Recommendation
Update the Fabrik extension to version 4.6.8 or later to fix the vulnerability.
Original NVD description (English source)
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model.