CVE-2026-76608EPSS p32.5%

CVE-2026-76608CVE-2026-76608

Description

Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The onGetEmail endpoint did not perform any access checks.

Scoring

EPSS0.41% probability of exploitation · percentile 32.5% · 2026-10-05T12:00:23Z
Last modified2026-08-26
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.