CVE-2026-76609

The Joomla Extension from fabrikar.com is vulnerable to unauthenticated modification of comments due to insufficient access controls on the onUpdateComment endpoint in versions prior to 4.7.2. This flaw allows attackers to alter comments without authentication, potentially leading to misinformation or reputational damage. Organizations using this extension should prioritize updating to version 4.7.2 or later to mitigate the risk.