CVE Catalog
CVE-2026-76606
CriticalCVSS 10.0Summary
The Joomla extension Fabrik before version 4.7.3 contains a Path Traversal vulnerability in the image element. The description lacks details, but it may allow reading arbitrary files on the server.
Risk Assessment
The vulnerability could allow an attacker to read sensitive files such as configuration or user data, posing a serious confidentiality risk.
Recommendation
Update Fabrik to version 4.7.3 or later to fix the vulnerability.
Original NVD description (English source)
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???.