CVE-2026-48944 | getk2 K2 Extension 1.0-2.26 on Joomla Configuration configuration.php JFile::copy path traversal

June 25, 2026 Yanac

A vulnerability was found in getk2 K2 Extension 1.0-2.26 on Joomla. It has been classified as critical. Impacted is the function JFile::copy of the file configuration.php of the component Configuration Handler. Performing a manipulation results in path traversal.

This vulnerability is reported as CVE-2026-48944. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More