by Kastro
Paper/Archive/CVE-2026-48939

CVE-2026-48939

icagenda.com iCagenda extension for Joomla — Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15

KEV · due 13 JulEPSS 20%public exploitSSVC actCVSS 10.0
critical.is priorityof 100
100
CVSS 10.0 (CNA)10.0 / 10 × 3030.0In CISA KEV+3030.0EPSS percentile 97.4.974 × 2019.5Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

Affected

ProductAffectedFixed inSource
iCagenda extension for Joomla3.2.1-4.0.7–CNA

Scores by source

Joomla (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reficagenda.comwriteupmysites.guru/blog/icagenda-zero-day-file-upload-rcepatchicagenda.com/docs/changelog/icagenda-3-9-15patchicagenda.com/docs/changelog/icagenda-4-0-8exploitgithub.com/Polosss/By-Poloss..-..CVE-2026-48939refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48939kevcisa.gov/known-exploited-vulnerabilities-catalog