CVE Catalog
CVE-2026-76605
CriticalCVSS 10.0Summary
The Joomla extension Fabrik before version 4.7.3 contains a remote code execution vulnerability in the image element. The description lacks details, but it may allow an attacker to execute arbitrary code on the server.
Risk Assessment
Remote code execution can lead to full server compromise, including system and data takeover.
Recommendation
Update Fabrik to version 4.7.3 or later to remediate the vulnerability.
Original NVD description (English source)
Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3 - ???.