VULNERABILITY INTELLIGENCE

CVE-2026-66915

EPSS probability0.82%
CISA KEVNot currently listed
Published2026-08-10
Last modified2026-10-23

Description

Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin.

Weakness classification

  • security@joomla.org: CWE-94

Primary references