CISA warns of actively exploited RCE flaws in Joomla extensions
Teaser from the source
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are exploiting vulnerabilities in the iCagenda and Balbooa Forms extensions for Joomla to achieve remote code execution through arbitrary file uploads. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputer →More on extensions
Other advisories
- CVE-2026-94589noneDas WordPress-Plugin Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) ist in allen Versionen bis einschließlich 3.
- osv:CLEANSTART-2026-NH18274noneWhen adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh
- osv:MAL-2026-17687highMalicious code in tailwindcss-ui-extensions (npm)
- osv:CVE-2026-17196noneSuper Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute
- osv:CLEANSTART-2026-FA45639noneWhen adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh
- CVE-2026-106510highBackstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
- CVE-2026-106510noneBackstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
- osv:CVE-2026-106510noneBackstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
Other news entries
- Newsthehackernews2026-10-0816 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
- Newsbleepingcomputer2026-10-02The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
- Vulnerabilitybsi-cert-bund-wid2026-10-01MediaWiki Extensions: Mehrere Schwachstellen
- Vulnerabilitybsi-cert-bund-wid2026-09-28MediaWiki Extensions: Mehrere Schwachstellen
- Newsbleepingcomputer2026-09-19BragJack attacks hijack AI browser agents through malicious extensions
- Newsbleepingcomputer2026-09-18Microsoft Teams will let admins block custom file extensions
- Newsbleepingcomputer2026-09-16Malware bypasses browser checks to force install Chrome, Edge extensions
- Vulnerabilitybsi-cert-bund-wid2026-09-14TYPO3 Extensions: Mehrere Schwachstellen
ID