CVE-2026-76601
Received Received - Intake

Unauthenticated Row Reordering in Fabrik Joomla Extension

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: Joomla! Project

Description
Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugin did not perform any access checks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-76601
EUVD
EUVD-2026-64315

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
joomla fabrik to 4.7.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Fabrik extension for Joomla where an attacker can reorder rows without authentication. The order plugin lacks proper access checks, allowing unauthorized users to manipulate data order.

Detection Guidance

This vulnerability can be detected by checking the version of the Fabrik extension in your Joomla installation. If the version is below 4.7.2, the system is vulnerable. No specific commands are provided in the context.

Impact Analysis

An attacker could reorder sensitive data, potentially exposing or misrepresenting information. This could lead to data integrity issues, unauthorized modifications, or confusion in displayed content.

Compliance Impact

This vulnerability could violate compliance requirements for data integrity and access controls. GDPR and HIPAA mandate proper access restrictions and data protection measures. Unauthorized modifications may lead to non-compliance.

Mitigation Strategies

Immediately update the Fabrik extension to version 4.7.2 or higher to address the unauthenticated row reordering issue. Ensure access controls are properly configured to prevent unauthorized actions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76601. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart