<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: fabrikar-com-fabrik-extension-for-joomla</title><description>Every new CVE for fabrikar-com-fabrik-extension-for-joomla.</description><link>https://agentprime.io/</link><item><title>CVE-2026-76606: Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76606/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76606/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:23:09 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-77027: Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-77027/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77027/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:21:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76602: Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76602/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76602/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:21:28 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-76603: Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76603/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76603/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:21:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76571: Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76571/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76571/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:21:01 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-76597: Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76597/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76597/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:20:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76598: Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76598/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76598/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:20:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76605: Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76605/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76605/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:20:27 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-76596: Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76596/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76596/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:20:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-77992: Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-77992/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77992/</guid><description>CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:20:18 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-76600: Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76600/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76600/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:19:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76604: Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76604/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76604/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:18:07 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-76607: Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76607/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76607/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:15:50 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-76609: Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76609/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76609/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:15:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76608: Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter&apos;s email address in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76608/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76608/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:14:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76599: Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76599/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76599/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:14:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76601: Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-76601/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76601/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 14:14:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-67282: Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik &lt; 4.6.8</title><link>https://agentprime.io/advisories/CVE-2026-67282/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-67282/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 09:05:34 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-66915: Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik &lt; 4.7.2</title><link>https://agentprime.io/advisories/CVE-2026-66915/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66915/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Aug 2026 09:53:28 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>