CVE-2026-48945 | getk2 K2 Extension 1.0-2.26 on Joomla TAR Archive /media/k2/galleries unrestricted upload

June 25, 2026 Yanac

A vulnerability was found in getk2 K2 Extension 1.0-2.26 on Joomla. It has been declared as critical. The affected element is an unknown function of the file /media/k2/galleries of the component TAR Archive Handler. Executing a manipulation can lead to unrestricted upload.

This vulnerability appears as CVE-2026-48945. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More