iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.
Read at CISA Known Exploited Vulnerabilities catalog
- Vendor
- ICagenda
- Product
- iCagenda
- CISA KEV
- listed
- Exploitation
- observed in the wild
- Fix
- available
Why it ranks 45 (Critical)
- CISA KEV listed
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
- CVE-2026-48939 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.