CRITICALVulnerability
Global

CISA warns of actively exploited RCE flaws in Joomla extensions

·Source: BleepingComputer

Updated:

Executive Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are exploiting vulnerabilities in the iCagenda and Balbooa Forms extensions for Joomla to achieve remote code execution through arbitrary file uploads. [...]

Analysis

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are exploiting vulnerabilities in the iCagenda and Balbooa Forms extensions for Joomla to achieve remote code execution through arbitrary file uploads. [...]
Source Attribution

Originally published by BleepingComputer on Jul 13, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Circle granted New York trust charter

Circle Internet Group, Inc. (NYSE: CRCL), a global financial technology company and stablecoin market leader, today announced that it has received a limited purpose trust charter from the New York Department of Financial Services (NYDFS) for Circle Internet Trust Company LLC, d/b/a Circle New York Trust.

Finextra
MEDIUMVulnerabilityNEW

Health-ISAC Warns of Increasing ShinyHunters Healthcare Data Theft Attacks

Health sector organizations have been warned about an increase in successful attacks by the ShinyHunters threat group. In contrast to […] The post Health-ISAC Warns of Increasing ShinyHunters Healthcare Data Theft Attacks appeared first on The HIPAA Journal .

HIPAA Journal
MEDIUMVulnerabilityNEW

New York sues Kalshi for 'illegal gambling operation'

New York state has sued Kalshi, alleging that the prediction market is running an "illegal gambling operation".

Finextra