Veille CVE

Samedi 20 juin 2026

2 CVE

  1. CVE-2026-48939 9.8 Critique Exploitée

    icagenda.com iCagenda extension for Joomla · Joomlic icagenda

    A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

  2. CVE-2026-48908 9.8 Critique Exploitée

    joomshaper.net SP Page Builder extension for Joomla · Ollyo sp page builder

    A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.