CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

EUVD•added 2026/06/25 3:25 p.m.•19 views

EUVD-2026-39443

The K2 frontend item.checkin task accepts an unauthenticated sigProFolder query parameter and uses it directly to address a JFolder::delete call under /media/k2/galleries/...

6.5CVSS5.8AI score0.00266EPSS

SaveExploits0References1

Cvelist•added 2026/06/25 3:25 p.m.•53 views

CVE-2026-48941 Joomla Extension - getk2.org - Unauthenticated folder delete in K2 extension for Joomla < 2.26

The K2 frontend item.checkin task accepts an unauthenticated sigProFolder query parameter and uses it directly to address a JFolder::delete call under /media/k2/galleries/...

0.00266EPSS

SaveExploits0References1

CVE•added 2026/06/25 3:25 p.m.•55 views

CVE-2026-48941

The K2 extension for Joomla (versions

6.5CVSS5.7AI score0.00266EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2026/06/25 12:00 a.m.•1 views

CVE-2026-48941: Missing Authorization

The K2 frontend item.checkin task accepts an unauthenticated sigProFolder query parameter and uses it directly to address a JFolder::delete call under /media/k2/galleries/...

6.5CVSS5.7AI score0.00266EPSS

SaveExploits0References2

Positive Technologies•added 2026/06/25 12:00 a.m.•25 views

PT-2026-52464

The K2 frontend item.checkin task accepts an unauthenticated sigProFolder query parameter and uses it directly to address a JFolder::delete call under /media/k2/galleries/...

5.8AI score0.00266EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by