CVE-2026-66915

Summary

Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.6.7 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin.

Affected Software

Weaknesses

• CWE-94: CWE-94 Improper Control of Generation of Code ('Code Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://mysites.guru/blog/fabrik-unauthenticated-rce-calc-element/

References

• https://www.fabrikar.com/

• ←Previous
• Next→