CVE Catalog
CVE-2026-76607
CriticalCVSS 10.0Summary
The Joomla extension Fabrik before version 4.7.3 has a missing ACL check in the download element. The description lacks details, but missing ACL may allow unauthorized users to access protected files.
Risk Assessment
Missing access control could lead to disclosure of sensitive files to unauthorized individuals, compromising data confidentiality.
Recommendation
Update Fabrik to version 4.7.3 or later to ensure proper access controls.
Original NVD description (English source)
Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.3 - ???.