CVE-2026-76607

The Fabrik Joomla extension versions prior to 4.7.3 are vulnerable due to a missing Access Control List (ACL) check in the download element, allowing unauthorized users to access and download sensitive files. This critical vulnerability poses a severe risk of data exposure and exploitation, making it imperative for all Joomla users utilizing the Fabrik extension to prioritize immediate updates to version 4.7.3 or later. Organizations relying on this extension should act swiftly to mitigate potential breaches.