Lucene search
+L

3 matches found

AlpineLinux
AlpineLinux
•added 2026/06/25 3:25 p.m.•24 views

CVE-2026-48941

The K2 frontend item.checkin task accepts an unauthenticated sigProFolder query parameter and uses it directly to address a JFolder::delete call under /media/k2/galleries/...

6.5CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•0 views

CVE-2026-48941: Missing Authorization

The K2 frontend item.checkin task accepts an unauthenticated sigProFolder query parameter and uses it directly to address a JFolder::delete call under /media/k2/galleries/...

6.5CVSS5.7AI score0.00266EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•24 views

PT-2026-52464

The K2 frontend item.checkin task accepts an unauthenticated sigProFolder query parameter and uses it directly to address a JFolder::delete call under /media/k2/galleries/...

5.8AI score0.00266EPSS
SaveExploits0References2
Rows per page
Query Builder