Actively exploited vulnerabilities affecting iCagenda products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-48939https://wildfortech.com/security#CVE-2026-48939iCagenda's file attachment feature fails to restrict what file types users can upload, allowing attackers to upload PHP files and execute arbitrary code on the server. This is a high-severity vulnerability because remote code execution gives an attacker full control over the affected system — they can steal data, install malware, pivot to internal networks, or establish persistent access. Any internet-facing deployment of iCagenda is at significant risk until this is resolved.Fri, 10 Jul 2026 00:00:00 GMTiCagendaiCagenda