3 matches found
CVE-2026-48941
The K2 frontend item.checkin task accepts an unauthenticated sigProFolder query parameter and uses it directly to address a JFolder::delete call under /media/k2/galleries/...
6.5CVSS5.8AI score0.00266EPSS
SaveExploits0References1
CVE-2026-48941: Missing Authorization
The K2 frontend item.checkin task accepts an unauthenticated sigProFolder query parameter and uses it directly to address a JFolder::delete call under /media/k2/galleries/...
6.5CVSS5.7AI score0.00266EPSS
SaveExploits0References2
20