Vulnerability Bulletins

CVE-2026-76597

   
Affected software JOOMLA
 
Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 - The list email plugin controller allows to upload non-executable files to the webroot.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-76597