CVE-2026-48939 — Vulnerability intelligence

joomlic — icagenda

Published: 2026-06-20T11:56:50.752Z

CVSS

10

CISA KEV

Known exploitation

Original source text (not a translation)

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

Sources

• CVE-2026-48939
• Product
• Exploit, Third Party Advisory
• Third Party Advisory
• US Government Resource
• Release Notes
• Release Notes
• CVE-2026-48939