iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-13 05:36 UTC
  • Importiert: 2026-07-17 13:39 UTC
  • CVSS: 10.0
  • Quelle-ID: thn_global
  • uid_hash: 279e922fae1f4c85f215c527d6f8c8ddd6c6c53fb83461a187909ce44f957137

Inhalt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation in the wild.

The vulnerabilities, both rated 10.0 on the CVSS scoring system, are below -

CVE-2026-48939 - A vulnerability in the

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-48939

CRITICAL

10

CRITICAL

10

2026-06-20

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews