Unrated severityNVD Advisory· Published Aug 22, 2026

Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2

CVE-2026-76598

Description

Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 - The onAjax_getFolders method of the elements model allows arbitrary directory listings.

Affected products

Joomla/Fabrikllm-fuzzy
Range: <4.7.2
Fabrikar/Fabrikllm-fuzzy
Range: <4.7.2

Patches

Vulnerability mechanics

References

www.fabrikar.commitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000