CVE-2026-76601

The Fabrik extension for Joomla versions prior to 4.7.2 is vulnerable to unauthenticated row reordering due to a lack of access checks in the order plugin. This flaw allows attackers to manipulate data presentation without authentication, potentially leading to data integrity issues. Joomla administrators using affected versions should prioritize applying the update to mitigate this risk.