Skip to content
NewA calmer, faster ZeroHour
Exploit / PoChighExploited in the wild

U.S. CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairs ()1 min read3
Read at securityaffairs.com
Analyze CVE-2026-48939 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-48939CVE-2026-56291
Tags
cve-2026-48939cve-2026-56291exploit

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-48939
Unauthenticated File-Upload RCE in Joomlic iCagenda for Joomla
10.020%KEVPoC
KEV
CVE-2026-56291
Unauthenticated File Upload RCE in Balbooa Forms (Joomla)
10.015%KEVPoC
KEV

From the original article

1 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.