HIGHVulnerability
Verified
Global

CISA KEV: iCagenda iCagenda — iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

Analysis

iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution. Added to CISA Known Exploited Vulnerabilities catalog on 2026-07-10. Remediation due: 2026-07-13.

Indicators of Compromise (1)

CVE (1)
CVE-2026-48939
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jul 10, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

UniCredit, Accenture, and IBM join forces for pan-European banking expansion

UniCredit, one of Europe's leading pan-European banking groups, Accenture and IBM have announced a long-term strategic collaboration that establishes the technology foundation supporting UniCredit's growth across the thirteen European markets in which the Group operates.

Finextra
MEDIUMVulnerabilityNEW

South African crypto platform Luno to axe 20% of staff

Digital Currency Group’s crypto exchange Luno will cut 20% of its global staff in restructures, Bloomberg reported on Tuesday.

Finextra
MEDIUMVulnerability

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session. The operator, tracked through the aliases knaithe and KnYuan,

The Hacker News