Tag

#CVE-2026-56291

1 published story tagged with CVE-2026-56291.

criticalAPT / Nation-StateJul 10, 2026·3 min read

Attackers exploit Joomla extension vulnerabilities to execute remote code via malicious file uploads

Two critical vulnerabilities in popular Joomla extensions-Balbooa Forms and iCagenda-are being actively exploited in the wild to achieve unauthenticated remote code execution.