{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 6 to 12 July 2026 (week 28)","summary":"In the week of 6 to 12 July 2026, 6 vulnerabilities were newly recorded as exploited in the wild, 6 of them critical. The technology hit most was Adobe ColdFusion (1), followed by Icagenda.com iCagenda (1) and Joomlack Page Builder (1).","url":"https://junglewise.ai/threats/exploited/2026-07-06","json_url":"https://junglewise.ai/threats/exploited/2026-07-06.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-07-06","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":6,"period":{"end":"2026-07-12","start":"2026-07-06"},"critical":6,"generated_at":"2026-10-02T19:24:09.297469+00:00","technologies":[{"hub":true,"name":"Adobe ColdFusion","slug":"coldfusion","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/coldfusion"},{"hub":true,"name":"Icagenda.com iCagenda","slug":"icagenda","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/icagenda"},{"hub":false,"name":"Joomlack Page Builder","slug":"page-builder","vulnerabilities":1},{"hub":false,"name":"Joomlack.fr Page Builder CK","slug":"page-builder-ck","vulnerabilities":1},{"hub":true,"name":"JoomShaper SP Page Builder","slug":"sp-page-builder","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/sp-page-builder"},{"hub":true,"name":"Langflow","slug":"langflow","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/langflow"},{"hub":true,"name":"langflow (PyPI)","slug":"pypi-langflow","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/pypi-langflow"}],"vulnerabilities":[{"cve":"CVE-2026-56291","cvss":10,"epss":0.0028,"slug":"cve-2026-56291-balbooa-forms-for-joomla-unauthenticated-file-upload-rce","title":"Balbooa Forms for Joomla unauthenticated file upload RCE","severity":"critical","exploited":true,"published_at":"2026-07-09T11:16:40.99+00:00","exploited_since":"2026-07-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-56291-balbooa-forms-for-joomla-unauthenticated-file-upload-rce"},{"cve":"CVE-2026-48939","cvss":10,"epss":0.0056,"slug":"cve-2026-48939-joomla-icagenda-arbitrary-file-upload-in-file-attachment-feature","title":"Joomla iCagenda arbitrary file upload in file attachment feature","severity":"critical","exploited":true,"published_at":"2026-06-20T13:16:42.433+00:00","technologies":[{"hub":true,"name":"Icagenda.com iCagenda","slug":"icagenda","vendor":{"name":"Icagenda.com","slug":"icagenda-com"}}],"exploited_since":"2026-07-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48939-joomla-icagenda-arbitrary-file-upload-in-file-attachment-feature"},{"cve":"CVE-2026-48282","cvss":10,"epss":0.0102,"slug":"cve-2026-48282-adobe-coldfusion-path-traversal-in-multiple-versions","title":"Adobe ColdFusion path traversal in multiple versions","severity":"critical","exploited":true,"published_at":"2026-06-30T16:16:54.533+00:00","technologies":[{"hub":true,"name":"Adobe ColdFusion","slug":"coldfusion","vendor":{"name":"Adobe","slug":"adobe"}}],"exploited_since":"2026-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48282-adobe-coldfusion-path-traversal-in-multiple-versions"},{"cve":"CVE-2026-56290","cvss":10,"epss":0.0036,"slug":"cve-2026-56290-joomlack-page-builder-ck-unauthenticated-arbitrary-file-upload","title":"Joomlack Page Builder CK unauthenticated arbitrary file upload","severity":"critical","exploited":true,"published_at":"2026-06-29T15:16:42.36+00:00","technologies":[{"hub":false,"name":"Joomlack Page Builder","slug":"page-builder","vendor":{"name":"Joomlack","slug":"joomlack"}},{"hub":false,"name":"Joomlack.fr Page Builder CK","slug":"page-builder-ck","vendor":{"name":"Joomlack.fr","slug":"joomlack-fr"}}],"exploited_since":"2026-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-56290-joomlack-page-builder-ck-unauthenticated-arbitrary-file-upload"},{"cve":"CVE-2026-55255","cvss":9.9,"epss":0.0089,"slug":"cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow","title":"Langflow IDOR in responses endpoint allows cross-user flow execution","severity":"critical","exploited":true,"published_at":"2026-06-23T17:17:08.05+00:00","technologies":[{"hub":true,"name":"Langflow","slug":"langflow","vendor":{"name":"Langflow","slug":"langflow"}},{"hub":true,"name":"langflow (PyPI)","slug":"pypi-langflow","vendor":{"name":"PyPI","slug":"pypi"}}],"exploited_since":"2026-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow"},{"cve":"CVE-2026-48908","cvss":10,"epss":0.008,"slug":"cve-2026-48908-joomshaper-sp-page-builder-arbitrary-file-upload-in-joomla","title":"JoomShaper SP Page Builder arbitrary file upload in Joomla","severity":"critical","exploited":true,"published_at":"2026-06-20T13:16:42.08+00:00","technologies":[{"hub":true,"name":"JoomShaper SP Page Builder","slug":"sp-page-builder","vendor":{"name":"JoomShaper","slug":"joomshaper"}}],"exploited_since":"2026-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48908-joomshaper-sp-page-builder-arbitrary-file-upload-in-joomla"}],"previous":{"key":"2026-06-29","top":"Microsoft SharePoint","total":2,"period":{"end":"2026-07-05","start":"2026-06-29"},"critical":2,"url":"https://junglewise.ai/threats/exploited/2026-06-29"},"next":{"key":"2026-07-13","top":"Fortinet FortiSandbox","total":10,"period":{"end":"2026-07-19","start":"2026-07-13"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-07-13"}}