AUGUST 25, 2026
Live Feed
Back to database
Case File

CVE-2026-48948

HIGH · CVSS 8.8 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-07-07 · Last synced 2026-08-06

CyberRota Analysis

AI-Generated

An improper access control vulnerability allows unauthorized users to download vCard exports of contacts from the com_contact component, potentially exposing sensitive information. This high-severity issue could lead to data leakage and privacy violations. Organizations utilizing this component should prioritize remediation to protect user data and maintain compliance with privacy regulations.

CVE
CVE-2026-48948
Severity
HIGH
CVSS
8.8
EPSS
0.24%

Original NVD Description

An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-48958 HIGH CVE-2026-48957 HIGH CVE-2026-48956 MEDIUM CVE-2026-48955 MEDIUM CVE-2026-48954 MEDIUM CVE-2026-48953 MEDIUM