What is GHSA-ch8m-c7x9-7r7f?

GHSA-ch8m-c7x9-7r7f is a security advisory published by GitHub Security Advisories with Critical severity. Joomla Extension - fabrikar.com - Remote code execution in Fabrik \u003c 4.6.7 - An unauthenticated...

Which CVE IDs does GHSA-ch8m-c7x9-7r7f cover?

GHSA-ch8m-c7x9-7r7f covers the following CVE IDs: CVE-2026-66915. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-ch8m-c7x9-7r7fCritical

Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.6.7 - An unauthenticated...

Vendor

GitHub Security Advisories

Published

August 10, 2026

Last Modified

August 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-66915 →

📋 Description

Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.6.7 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-66915
https://www.fabrikar.com
https://mysites.guru/blog/fabrik-unauthenticated-rce-calc-element
https://github.com/advisories/GHSA-ch8m-c7x9-7r7f