CVE-2026-48946 | getk2 K2 Extension 1.0-2.26 on Joomla Attachment Upload unrestricted upload

June 25, 2026 Yanac

A vulnerability was found in getk2 K2 Extension 1.0-2.26 on Joomla and classified as critical. This issue affects some unknown processing of the component Attachment Upload Handler. Such manipulation leads to unrestricted upload.

This vulnerability is documented as CVE-2026-48946. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More