VulnSocial

CVE-2026-67365Disclosure

LOWCVSS 9.2 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com_ajax with no session, token or account.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-08-15); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-08-15: 1Mentions · 2026-08-17: 1Patch / Workaround · 2026-08-17: 1Technical Details · 2026-08-15: 1Technical Details · 2026-08-17: 108-1508-17
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-08-151
Disclosure1
2026-08-171
Patch1
Full discourse2 posts
  • CCB Alert@CCBalert
    Patch

    Warning: Critical unauthenticated SQL injection in #iCagenda for #Joomla. #CVE-2026-67365 CVSS: 9.2. Affects versions 4.0.0–4.0.11 via mod_icagenda_calendar, reachable via com_ajax. Upgrade to 4.0.12 or later. #Patch #Patch #Patch

    Post summary

    The advisory warns of a critical unauthenticated SQL injection in iCagenda for Joomla (CVE-2026-67365) affecting versions 4.0.0–4.0.11 and recommends upgrading to 4.0.12 or newer to address the vulnerability.

    02001363
    7.2K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-67365 Unauthenticated SQL Injection in iCagenda Versions Below 4.0.0-4.0.11 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-67365

    Post summary

    The post discloses that CVE-2026-67365 is an unauthenticated SQL injection flaw in iCagenda versions below 4.0.0-4.0.11, with no further exploit or patch details.

    00000106
    4.1K followersView on X

Explore more

Back to dashboard