Skip to content
The Nexus
SECURITYJul 13 · 05:36 UTCTHE HACKER NEWS[email protected] (The Hacker News)

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

CISA added two maximum-severity vulnerabilities in iCagenda and Balbooa Joomla extensions to its KEV catalog, citing reports of zero-day exploitation. Both flaws, rated 10.0 on the CVSS scale, are being actively exploited.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned
U.S. Cybersecurity and Infrastructure Security AgencyorganizationCISAorganizationCVE-2026-48939topiciCagendatopicBalbooatopicJoomlatopicKnown Exploited Vulnerabilities (KEV) catalogtopic
Spot something wrong with this article?Report a problem →
Forward this
Related Signal

Adjacent reporting