CVE-2026-67365

The iCagenda Joomla extension versions prior to 4.0.0-4.0.11 are vulnerable to unauthenticated SQL injection through the mod_icagenda_calendar component, allowing attackers to execute arbitrary SQL queries without authentication. This critical vulnerability poses a significant risk as it can lead to unauthorized data access or manipulation. Joomla site administrators using affected versions should prioritize immediate updates to mitigate potential exploitation.