CVE-2026-48939

iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

Icagenda

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

20. Jun 2026

Ausgewertete Quellen

• Hinweis
  https://mysites.guru/blog/icagenda-zero-day-file-upload-rce/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48939
• CISA
  iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
• NVD
  CVE-2026-48939
• GitHub
  https://github.com/Polosss/By-Poloss..-..CVE-2026-48939