Exploit for CVE-2026-66915

cve · 2026-08-10

Description

Unauthenticated remote code execution in Fabrik Joomla extension before 4.6.7 via ajax_calc in the calc plugin.

CVSS 10.0 for CVE-2026-66915

10.0

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

EPSS Score

0.6%higher than 45.7% of all CVEs

Updated 2026-08-14

CVE Information

CVE-2026-66915

References

https://www.fabrikar.com/

https://mysites.guru/blog/fabrik-unauthenticated-rce-calc-element/

Exploit Details

Modified:2026-08-12 09:17

Last Seen:2026-08-12 09:41

Reporter:Joomla

Other exploits for CVE-2026-66915

📄 Joomla Fabrik 4.6.6 Remote Code Execution

2026-08-11 1dayexploitPACKETSTORMPython

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-66915
Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.6.9 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin.

Exploit Code

Share

Share on social media: