{"uuid": "96b6f0ca-7c7d-4c1e-9813-166ae0851eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/pphm_HackerNews/1987", "content": "\ud83d\udd34 Two Critical Joomla Flaws Exploited as Zero-Days\n\nCISA has added two maximum-severity vulnerabilities to its Known Exploited \n\nVulnerabilities catalog:\n\n\u26a0\ufe0f CVE-2026-48939: iCagenda arbitrary file upload\n\n\u26a0\ufe0f CVE-2026-56291: Balbooa Forms unauthenticated remote code execution\n\nBoth flaws carry a CVSS score of 10.0\n\nAttackers can upload malicious PHP files and deploy web shells", "creation_timestamp": "2026-08-22T00:00:26.738936Z"}