Threat intelligence / Vulnerability
CVE-2026-48939
iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.
Vulnerability
TypeVulnerability
External ID—
First seen2026-07-10
Last seen2026-07-10
Confidence
—
iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.
Labels
CISA KEV context
Vendor / productiCagenda iCagenda
Added2026-07-10
Due date2026-07-13
2 recorded
Relationships
2 external