{"vulnerability": "CVE-2026-56291", "sightings": [{"uuid": "be59e79a-1e38-461a-9c67-049c5dfe8dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/pphm_HackerNews/1987", "content": "\ud83d\udd34 Two Critical Joomla Flaws Exploited as Zero-Days\n\nCISA has added two maximum-severity vulnerabilities to its Known Exploited \n\nVulnerabilities catalog:\n\n\u26a0\ufe0f CVE-2026-48939: iCagenda arbitrary file upload\n\n\u26a0\ufe0f CVE-2026-56291: Balbooa Forms unauthenticated remote code execution\n\nBoth flaws carry a CVSS score of 10.0\n\nAttackers can upload malicious PHP files and deploy web shells", "creation_timestamp": "2026-08-21T23:00:10.358271Z"}, {"uuid": "96b6f0ca-7c7d-4c1e-9813-166ae0851eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/pphm_HackerNews/1987", "content": "\ud83d\udd34 Two Critical Joomla Flaws Exploited as Zero-Days\n\nCISA has added two maximum-severity vulnerabilities to its Known Exploited \n\nVulnerabilities catalog:\n\n\u26a0\ufe0f CVE-2026-48939: iCagenda arbitrary file upload\n\n\u26a0\ufe0f CVE-2026-56291: Balbooa Forms unauthenticated remote code execution\n\nBoth flaws carry a CVSS score of 10.0\n\nAttackers can upload malicious PHP files and deploy web shells", "creation_timestamp": "2026-08-22T00:00:26.738936Z"}, {"uuid": "97f961ca-8449-4e8a-b840-03e61b27a54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116889906648087046", "content": "CVE-2026-56291 | CRITICAL: Balbooa Forms for Joomla (v1.0 \u2013 2.4.0) allows unauthenticated RCE via arbitrary file upload (CWE-434). No patch yet. Disable or restrict access until fixed. https://radar.offseq.com/threat/cve-2026-56291-cwe-434-unrestricted-upload-of-file-aa89baa3213ad239 #OffSeq #Joomla #RCE #Vuln", "creation_timestamp": "2026-07-09T12:00:30.367028Z"}, {"uuid": "596be121-8685-40e9-802b-8ecb5f64837f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mq7ljhukn42i", "content": "CRITICAL: Balbooa Forms for Joomla (1.0 \u2013 2.4.0) lets unauthenticated attackers upload and run files, enabling full RCE. No patch out. Restrict or disable use now. https://radar.offseq.com/threat/cve-2026-56291-cwe-434-unrestricted-upload-of-file-aa89baa3213ad239 #OffSeq #Joomla #Security", "creation_timestamp": "2026-07-09T12:00:31.415727Z"}, {"uuid": "3ce5e181-ab04-4604-94f8-bfa1df6b5e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lnwtosi2x", "content": "CVE-2026-56291 - Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension\nCVE ID : CVE-2026-56291\n \n Published : July 9, 2026, 11:16 a.m. | 32\u00a0minutes ago\n \n Description : The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arb...", "creation_timestamp": "2026-07-09T12:03:01.091980Z"}, {"uuid": "ae9a709b-3e4d-4f73-93c0-0ed8b3aca0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mstfhme7qs26", "content": "\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001iCagenda\u3068Balbooa Forms\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09 \u306f\u3001iCagenda\u3068Balbooa Forms\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f\u4e0d\u5177\u5408\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-48939  \uff08CVSS\u30b9\u30b3\u30a210.0\uff09iCagenda\u306b\u304a\u3051\u308b\u5371\u967a\u306a\u30bf\u30a4\u30d7\u306e\u30d5\u30a1\u30a4\u30eb\u306e\u7121\u5236\u9650\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306e\u8106\u5f31\u6027\nCVE-2026-56291  Balbo...", "creation_timestamp": "2026-08-11T19:55:45.211856Z"}, {"uuid": "203ebeb0-360f-4789-8b20-405ca4383af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mstfxfwgus26", "content": "Joomla\u5411\u3051\u6a5f\u80fd\u62e1\u5f35\u300ciCagenda\u300d\u300cBalbooa Forms\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300cJoomla\u300d\u5411\u3051\u62e1\u5f35\u6a5f\u80fd\u300ciCagenda\u300d\u300cBalbooa Forms\u300d\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u5bfe\u7b56\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\nCISA\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670810\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u30782\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-48939\u300d\u300cCVE-2026-56291\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u3053\u308c\u3089\u8106\u5f31\u306a\u6a5f\u80fd\u62e1\u5f35\u304c\u5c0e\u5165\u3055\u308c\u305f\u30b3\u30f3\u30c6\u30f3\u30c4\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b7\u30b9\u30c6\u30e0\u300cJoomla\u300d\u306e\u7a3c\u50cd\u74b0\u5883\u3067\u306f\u3001\u5f62\u5f0f\u3092\u554f\u308f\u305a\u5236\u9650\u306a\u3057\u306b\u30d5...", "creation_timestamp": "2026-08-11T20:04:34.823730Z"}, {"uuid": "006e5266-04a2-4f05-8d60-22113691a7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116896829543133479", "content": "CISA has added two vulnerabilities to the KEV catalogue.\n-  CVE-2026-48939: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48939\n-  CVE-2026-56291: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-56291 #CISA #infosec #vulnerability", "creation_timestamp": "2026-07-10T17:21:04.803099Z"}, {"uuid": "92e2ef8f-d2e2-4918-bf2c-700fc0fc3b85", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2441e572-031d-4f21-a37b-f97ea742bf70", "content": "", "creation_timestamp": "2026-07-10T18:00:02.597504Z"}, {"uuid": "432d1805-bc35-4faa-90ea-ad5d011cfcd9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7f8175a4-d002-4926-ad93-9c4b5f79efc9", "content": "", "creation_timestamp": "2026-07-10T18:00:24.652822Z"}, {"uuid": "e9093ec0-6b07-499f-8210-ea42aaa0e23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mqcr4thq7p2j", "content": "\ud83d\uded1 CVE-2026-56291\nBalbooa Forms\nCVSS 10.0 / EPSS 0% / KEV \u2705\nTL;DR: The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload t\u2026\nhttps://cvesentinel.com/report/CVE-2026-56291?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-10T18:18:48.716003Z"}, {"uuid": "d8a4ab19-c0a6-4b4c-94a8-0bff151baf53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6961010", "content": "2026-07-10: [CVE-2026-56291] Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityBalbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.\ncisakev", "creation_timestamp": "2026-07-10T21:00:34.038500Z"}, {"uuid": "79017480-3fda-42e1-9ed6-48d6d54a490a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqdlc7ntu62d", "content": "\ud83d\udccc CVE-2026-56291 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full ... https://www.cyberhub.blog/cves/CVE-2026-56291", "creation_timestamp": "2026-07-11T02:07:06.837562Z"}, {"uuid": "c5e2e593-7508-4973-bffa-30b0a4562194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqebrjho4z2k", "content": "A perfect 10. That's the CVSS score for this one.\n\nCVE-2026-56291.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-56291-balbooa-forms-unauthenticated-rce-exploited/\n\n#CyberSecurity #PatchNow", "creation_timestamp": "2026-07-11T08:49:23.026355Z"}, {"uuid": "35b06be8-e127-4ed8-825d-8b96051085b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mqfjy535kc2p", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-56291: The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading exec\u2026\nCVSS 9.8 \u00b7 EPSS 0.8% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-56291\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-11T20:48:54.092666Z"}, {"uuid": "5cf009e2-084b-424b-929b-9d0a7484e8db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqgt2iclle2z", "content": "\u26a0\ufe0f A perfect 10.0 CVSS score. That's not a typo.\n\nCVE-2026-56291.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-56291-balbooa-forms-unauthenticated-rce-exploited/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-12T09:03:56.463983Z"}, {"uuid": "0794fe45-caa6-415a-b5e8-09d6c7f0ffa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116907369274600216", "content": "\ud83d\udcf0 CISA Adds Two Actively Exploited Joomla Plugin Flaws to KEV Catalog\n\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-joomla-icagenda-balbooa-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-07-12T14:01:28.665080Z"}, {"uuid": "a14a455c-2bb7-4a3c-b8fd-4e7115d97493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqhdpsawu725", "content": "\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-12T14:02:12.095025Z"}, {"uuid": "42c02467-9f05-489e-a079-d47cce188268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfhzysx72c", "content": "CVE-2026-56291: Joomla Extensions Expose Organizations to Critical Risk #CVE202656291 #Joomla #CyberSecurity", "creation_timestamp": "2026-07-13T09:38:58.248040Z"}, {"uuid": "c38cfd8d-b545-415e-abec-b6a7e7cff668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mqir6myhs62o", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-56291) Balbooa Forms Remote Code Execution via Unauthenticated File Upload\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-07-13T03:35:47.664162Z"}, {"uuid": "454ed6ed-c205-4ff6-9fba-194a6c809847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqj5wg6v462s", "content": "\ud83e\udd16 CVE-2026-48939 & CVE-2026-56291 (CVSS 10.0): Two Joomla extensions exploited as zero-days in the wild. Unauthenticated RCE via file upload. CISA KEV added.\nhttps://thehackernews.com/2026/07/icagenda-and-balbooa-forms-joomla-flaws.html", "creation_timestamp": "2026-07-13T07:23:50.791754Z"}, {"uuid": "e76cacb3-e0b6-4ec9-9a4d-e982a5d34083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfhuju4x2f", "content": "CVE-2026-56291: Exploitation of Joomla Extensions is an Immediate Risk #CVE2026 #JoomlaSecurity #CyberSecurity", "creation_timestamp": "2026-07-13T09:38:52.557665Z"}, {"uuid": "6caa5a22-fcb4-4b05-b316-d7edd33ccf45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfhw4p3627", "content": "CVE-2026-56291 and CVE-2026-48939: Joomla Extensions Expose Unpatched Risk #Joomla #Cybersecurity #Vulnerability", "creation_timestamp": "2026-07-13T09:38:54.144523Z"}, {"uuid": "b5ed8d75-a146-4782-95a0-96491d246d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfhxw7if2k", "content": "CVE-2026-56291 and CVE-2026-48939: Joomla Extensions Expose Untracked Risks #CyberSecurity #Vulnerabilities #Joomla", "creation_timestamp": "2026-07-13T09:38:56.454019Z"}, {"uuid": "ef73c266-e367-4cdb-aa46-ab92b208fa44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfi57zv32j", "content": "CVE-2026-56291: Joomla Extensions Vulnerabilities Don't Justify Alarmist Hype #CyberSecurity #Joomla #Vulnerabilities", "creation_timestamp": "2026-07-13T09:39:01.867290Z"}, {"uuid": "d7402c10-1fc9-4e3a-a416-8d35667f7021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfm3n2vp2f", "content": "CVE-2026-56291 and CVE-2026-48939: Urgency or Overreaction in Joomla's Security Response? #Joomla #CyberSecurity #VulnerabilityManagement", "creation_timestamp": "2026-07-13T09:41:14.678841Z"}, {"uuid": "4bb161de-6a20-457f-bc44-7c4cee034f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mqkmnbpmtc2n", "content": "Monday\u2019s fuck up - this Time - Joomla - \u200aCISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities. CVE-2026-48939 in iCagenda and CVE-2026-56291 in Balbooa Actively Exploited!\nthecyberexpress.com/cisa-cve-202... #joomla #exploit #0day #CISA #cve-2026-48939 #cve-2026-56291 #iCagenda #Balbooa", "creation_timestamp": "2026-07-13T11:20:07.814963Z"}, {"uuid": "02fb9d69-1617-4fb6-bc61-a7feb75129cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://dnsc.ro/citeste/alerta-vulnerabilitati-exploatate-activ-in-joomla", "content": "", "creation_timestamp": "2026-07-13T12:15:13.403685Z"}, {"uuid": "4884fb6c-eac2-425b-8dc3-cba9fb9b7c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mqjplozg4p2v", "content": "U.S. CISA has added two vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-48939 (iCagenda) and CVE-2026-56291 (Balbooa Forms). CVE-2026-48939, with a CVSS score of 10.0, allows arbitrary file uploads leading to PHP code execution.", "creation_timestamp": "2026-07-13T12:39:58.007689Z"}, {"uuid": "b738bc9c-07f1-4653-90fe-b6b4d706bf15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjzbegj7q27", "content": "CVE-2026-48939 and CVE-2026-56291: Joomla Extensions Are Under Siege #Joomla #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-13T15:33:09.628461Z"}, {"uuid": "5ec233c5-7fda-45da-8f70-dbfddfee2e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjzbgc4ui2h", "content": "CVE-2026-48939 and CVE-2026-56291 Expose Joomla Sites to RCE \u2014 Immediate Action Required #Joomla #CyberSecurity #RCE", "creation_timestamp": "2026-07-13T15:33:11.195698Z"}, {"uuid": "1e914f60-e901-46d8-be56-9a049ed32d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqkdz6s6c22d", "content": "CISA flags active RCE exploitation in Joomla extensions iCagenda and Balbooa Forms. Arbitrary file upload flaws in CVE-2026-48939 and CVE-2026-56291 can lead to full site compromise. #Joomla #iCagenda #BalbooaForms", "creation_timestamp": "2026-07-13T18:45:25.954014Z"}, {"uuid": "43229547-37fc-4054-bd9c-dd96d2bfb5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116914226485690947", "content": "\ud83d\udcf0 CISA Adds Two Actively Exploited Joomla Plugin Flaws to KEV Catalog\n\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-joomla-icagenda-balbooa-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-07-13T19:05:21.682789Z"}, {"uuid": "7bfc25ab-a380-4714-ad92-b3fa2853306e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqkf637sbx2u", "content": "\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-13T19:06:04.025687Z"}, {"uuid": "b7a39a5e-5496-42b8-8759-2ec9eb2cb06f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/GithubRedTeam/92958", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 10:57:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nBalbooa Forms (com_baforms) < 2.4.1 \u2014 Unauthenticated File Upload to RCE via form.uploadAttachmentFile | CVSS 9.8 | CISA KEV\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:04.754907Z"}, {"uuid": "3ddbd633-53a6-453f-8e25-6215b0463ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92958", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 10:57:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nBalbooa Forms (com_baforms) < 2.4.1 \u2014 Unauthenticated File Upload to RCE via form.uploadAttachmentFile | CVSS 9.8 | CISA KEV\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:08.137821Z"}, {"uuid": "f48e2ad7-85c8-4b88-af62-fd973f3147c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mqli7q37zh2a", "content": "CISA warns of actively exploited RCE flaws in Joomla extensions (CVE-2026-48939 and CVE-2026-56291) #patchmanagement", "creation_timestamp": "2026-07-14T05:33:20.037435Z"}, {"uuid": "669a852b-167e-4889-8c0d-3d7fbe529a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mqloi5uyei22", "content": "\ud83d\udcf0 CISA Peringatkan Celah Kritis pada Ekstensi Joomla yang Sedang Dieksploitasi untuk Serangan RCE\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/14/cisa-peringatkan-kerentanan-joomla-rce/\n\n#balbooaForms #cisa #cve-2026-48939 #cve-2026-56291 #cyberSecurity #icagenda #joomla #rce", "creation_timestamp": "2026-07-14T07:25:25.469304Z"}, {"uuid": "e2f08700-29d8-45c2-951f-445aa4a2f779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqlornb55u24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-53359: 26 interactions\nCVE-2026-43499: 25 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-56291: 6 interactions\nCVE-2026-48907: 5 interactions\nCVE-2026-57830: 3 interactions\n", "creation_timestamp": "2026-07-14T07:30:43.379566Z"}, {"uuid": "87f31ad6-8241-46ba-b062-9759da42fb62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqlu464yny26", "content": "A CVSS 10.0 vulnerability has a perfect track record of being ignored until it's too late.\n\nCVE-2026-56291.\n\nhttps://www.yazoul.net/malware/mirai-2026-07/reports/2026-07-12/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-14T09:06:05.467716Z"}, {"uuid": "d5f690e8-b531-44bd-be40-ff274d96e2fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56291", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqm3x766yk2r", "content": "Two Joomla extensions hit maximum severity. CISA confirms they're being exploited as zero-days.\n\nCVE-2026-48939.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-56291-balbooa-forms-unauthenticated-rce-exploited/\n\n#InfoSec #ThreatIntel", "creation_timestamp": "2026-07-14T11:26:28.602590Z"}, {"uuid": "c67ed81e-6fc0-4576-a921-754cd83c9354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6i637wp2p", "content": "CVE-2026-48939 and CVE-2026-56291: Joomla\u2019s Exploitation Exposes Security Gaps Amid Inaction #Joomla #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-14T12:11:45.779574Z"}, {"uuid": "b9714276-49a4-43c5-8f06-381ef3375caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6iced2d26", "content": "CVE-2026-48939 and CVE-2026-56291: Joomla Extensions Fail to Protect Users #CVE2026 #Joomla #CyberSecurity", "creation_timestamp": "2026-07-14T12:11:50.552323Z"}, {"uuid": "3a654e1d-1ac5-4690-8f6f-0d9b5086dbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6ijcdoa2o", "content": "CVE-2026-48939 and CVE-2026-56291: Are Joomla Patches Enough? #Joomla #Cybersecurity #Vulnerabilities", "creation_timestamp": "2026-07-14T12:11:57.577319Z"}, {"uuid": "911e2ec7-088b-4948-b64f-ebe31088f340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/GithubRedTeam/93302", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdenis77\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 23:08:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMendeteksi versi (passive detection) & Exploitation CVE POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:07.124072Z"}, {"uuid": "27604a56-4575-42e3-881b-2c33a216bfdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/GithubRedTeam/93247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291.yaml\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rimbadirgantara\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 14:53:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nnuclei template for CVE-2026-56291\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:07.351144Z"}, {"uuid": "5e492558-bdfc-4dd6-9dc9-e5b382460f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqrqmzaybj2j", "content": "Four critical CVEs. One breach. Two threat stories. All in one week.\n\nCVE-2026-23697, CVE-2026-23698, CVE-2026-34038, CVE-2026-56291.\nThat's four separate vendors with critical flaws in seven days.\n\nhttps://www.yazoul.net/news/article/2026-w28-weekly-threat-roundup/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-16T17:19:54.687780Z"}, {"uuid": "8907aea9-c95e-4f70-8ccc-56ba6f444736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "Telegram/vOHofO2qPvPXIyPNButd37pf6Fhua5DFTWTRaJatxt7pU5Q", "content": "", "creation_timestamp": "2026-07-16T19:00:08.411149Z"}, {"uuid": "5ec46ee8-1c06-4b30-87c4-1adb82a97d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "Telegram/ebH1a5NEotKwG91diqH39hoyWyfpt3aLkL269Yr45ItICbU", "content": "", "creation_timestamp": "2026-07-16T19:00:08.260260Z"}, {"uuid": "96694432-08a1-485e-8ce6-e534edcbb100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "Telegram/vOHofO2qPvPXIyPNButd37pf6Fhua5DFTWTRaJatxt7pU5Q", "content": "", "creation_timestamp": "2026-07-17T00:00:09.158329Z"}, {"uuid": "81d88c11-a623-418d-9171-5e62b15f2711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "Telegram/ebH1a5NEotKwG91diqH39hoyWyfpt3aLkL269Yr45ItICbU", "content": "", "creation_timestamp": "2026-07-17T00:00:09.494754Z"}, {"uuid": "f9fb9e54-fbb2-4a99-80f6-ba8d00de98d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291.yaml\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rimbadirgantara\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 14:53:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nnuclei template for CVE-2026-56291\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:49.405098Z"}, {"uuid": "d0a24a79-baf5-4e5e-8bc4-d778693966a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93302", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdenis77\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 23:08:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMendeteksi versi (passive detection) & Exploitation CVE POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:49.667680Z"}, {"uuid": "dd5d666f-5be1-4bbf-aafc-56738314f49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-56291.yaml", "content": "", "creation_timestamp": "2026-07-18T09:00:08.373469Z"}, {"uuid": "7abc73fd-b3b2-4693-966b-40759d0cc733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/GithubRedTeam/94057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChiefYoru\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 22:12:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:08.476058Z"}, {"uuid": "ae2795bf-9801-4d9f-ab7d-329aa72b5363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56291_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChiefYoru\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 22:12:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:26.784165Z"}, {"uuid": "8f6b9048-51cf-45f7-b733-7a0845df79ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-20T18:00:05.536250Z"}, {"uuid": "2217cc94-d0a6-4992-a73d-5ca41807c3be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "https://t.me/pphm_HackerNews/1987", "content": "\ud83d\udd34 Two Critical Joomla Flaws Exploited as Zero-Days\n\nCISA has added two maximum-severity vulnerabilities to its Known Exploited \n\nVulnerabilities catalog:\n\n\u26a0\ufe0f CVE-2026-48939: iCagenda arbitrary file upload\n\n\u26a0\ufe0f CVE-2026-56291: Balbooa Forms unauthenticated remote code execution\n\nBoth flaws carry a CVSS score of 10.0\n\nAttackers can upload malicious PHP files and deploy web shells", "creation_timestamp": "2026-08-23T00:00:43.558713Z"}, {"uuid": "833bd1f6-2d46-492b-957b-e86c581fe59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "seen", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-21T00:00:32.694907Z"}, {"uuid": "a096eaa3-3fc3-4fef-9037-2cc535d0e4b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56291", "type": "published-proof-of-concept", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-22T00:00:07.915147Z"}]}