Question 1

What is CVE-2026-48939 — iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability?

Accepted Answer

iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

Question 2

What is the authoritative source for CVE-2026-48939?

Accepted Answer

iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-48939) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	9.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	24.35% probability of exploitation · percentile 97.6% · 2026-08-04T12:00:14Z
Last modified	2026-07-11

CVE-2026-48939iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

Description

Scoring

CISA KEV entry