Back to the CVE list

CVE-2026-48946

Unrestricted file upload in Joomlaworks K2

CVSS score

6.3

EPSS probability

%0.3

Risk score

0.0

Published

3 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

No verified public exploit code was found.

GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.

Similar Vulnerabilities

6.5

CVE-2026-48944Path traversal in Joomlaworks K2

Vendorjoomlaworks Productk2

Patch status unknownEPSS %03 mo ago

6.5

CVE-2026-48943Joomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26

Vendorgetk2.org ProductK2 extension for Joomla+2 etkilenen

Patch status unknownEPSS %03 mo ago

5.3

CVE-2026-48945Unrestricted file upload in Joomlaworks K2

Vendorjoomlaworks Productk2

Patch status unknownEPSS %03 mo ago

6.5

CVE-2026-48941Missing authorization in Joomlaworks K2

Vendorjoomlaworks Productk2

Patch status unknownEPSS %03 mo ago

6.1

CVE-2026-48942Cross-site scripting in Joomlaworks K2

Vendorjoomlaworks Productk2

Patch status unknownEPSS %03 mo ago

3.4

CVE-2026-48940Cross-site scripting in Joomlaworks K2

Vendorjoomlaworks Productk2

Patch status unknownEPSS %03 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-48946"