CVE-2026-48939 — 脆弱性インテリジェンス

joomlic — icagenda

公表日: 2026-06-20T11:56:50.752Z

CVSS

10

CISA KEV

既知の悪用を確認

情報源の原文（翻訳ではありません）

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

情報源

• CVE-2026-48939
• Product
• Exploit, Third Party Advisory
• Third Party Advisory
• US Government Resource
• Release Notes
• Release Notes
• CVE-2026-48939