CVE-2026-76608

The Joomla Extension from fabrikar.com is vulnerable to an unauthenticated disclosure of email addresses for commenters due to insufficient access controls in the onGetEmail endpoint. This flaw allows unauthorized users to retrieve sensitive email information, potentially leading to privacy breaches and targeted attacks. Organizations using Fabrik versions prior to 4.7.2 should prioritize patching this vulnerability to protect user data.