CVE-2026-67282

CVSS 10.0 (critical) · published 2026-08-12

Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model.

Weakness: CWE-94

Source: NVD CVE-2026-67282

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.