Security Advisory

CVE-2026-76597

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-22 14:20:40
Last updated 2026-08-22 14:20:40
Assigner Joomla
CVSS score 8.7
State PUBLISHED

Description

Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 - The list email plugin controller allows to upload non-executable files to the webroot.