Security Advisory

CVE-2026-76598

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-22 14:20:38

Last updated 2026-08-22 14:20:38

Assigner Joomla

CVSS score 8.7

State PUBLISHED

Description

Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 - The onAjax_getFolders method of the elements model allows arbitrary directory listings.

← Browse all CVEs View on cve.org ↗