{"uuid": "33ec86a5-4e58-4f6d-8bae-9b01c7846466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://t.me/pphm_HackerNews/1987", "content": "\ud83d\udd34 Two Critical Joomla Flaws Exploited as Zero-Days\n\nCISA has added two maximum-severity vulnerabilities to its Known Exploited \n\nVulnerabilities catalog:\n\n\u26a0\ufe0f CVE-2026-48939: iCagenda arbitrary file upload\n\n\u26a0\ufe0f CVE-2026-56291: Balbooa Forms unauthenticated remote code execution\n\nBoth flaws carry a CVSS score of 10.0\n\nAttackers can upload malicious PHP files and deploy web shells", "creation_timestamp": "2026-08-23T00:00:43.602268Z"}