https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T03:50:42.016940+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-358481 EUVD-2026-358481 2026-10-09T03:50:42.019497+00:00 EUVD-2026-358481 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76571 fkie_cve-2026-76571 2026-10-09T03:50:42.019562+00:00

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply arbitrary SQL through the filter condition, giving full read of the database.

 https://cve.radiocsirt.org/vuln/ghsa-49rr-hfxh-8f4c GHSA-49rr-hfxh-8f4c 2026-10-09T03:50:42.019620+00:00

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.3 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply arbitrary SQL through the filter condition, giving full read of the database.