CVE-2026-76596
Received Received - Intake

Unauthenticated Table Truncation in Fabrik Joomla Extension

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: Joomla! Project

Description
Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-76596
EUVD
EUVD-2026-64323

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
fabrik joomla_extension to 4.7.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Fabrik Joomla extension versions before 4.7.2. It allows unauthenticated attackers to truncate database tables via a crafted GET request to the list.doempty endpoint. The endpoint lacks proper access control checks, enabling remote table deletion without authentication.

Detection Guidance

Check if Fabrik extension version is below 4.7.2 by inspecting Joomla admin panel or running SQL query: SELECT extension_version FROM #__extensions WHERE name LIKE '%fabrik%'; Look for unauthorized table truncation attempts in server logs by searching for GET requests to /index.php?option=com_fabrik&task=list.doempty.

Impact Analysis

An attacker could exploit this to delete critical data from your Joomla database, including user records, content, or application settings. This could lead to complete system failure, data loss, or disruption of services if backups are unavailable.

Mitigation Strategies

Update Fabrik extension to version 4.7.2 or higher immediately. Temporarily disable Fabrik component via Joomla admin panel if update is not possible. Monitor database access logs for suspicious activity and restrict database user permissions to prevent unauthorized table operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76596. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart