Q: What is the authoritative source for CVE-2026-84048?

CVE-2026-84048 (CVE-2026-84048) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 1

What is CVE-2026-84048 — CVE-2026-84048?

Accepted Answer

Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitrary file uploads, however neither file name nor file extension are under attacker control.

Question 2

What is the authoritative source for CVE-2026-84048?

Accepted Answer

CVE-2026-84048 (CVE-2026-84048) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.50% probability of exploitation · percentile 40.9% · 2026-10-05T12:00:23Z
Last modified	2026-09-19

CVE-2026-84048CVE-2026-84048

Description

Scoring