CVE-2026-48945

MEDIUM 5.3

Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26

CVSS Score

5.3

EPSS Score

0.2%

EPSS Percentile

10th

The K2 article gallery upload path accepts a zip/tar archive, extracts it under `/media/k2/galleries/<id>/`, and only renames image files (gif/jpg/jpeg/png/webp) to safe names — non-image files (including `.php`) are extracted as-is and remain executable via direct HTTP access.

CWE	CWE-434
Vendor	getk2.org
Product	k2 extension for joomla
Published	Jun 25, 2026
Last Updated	Jun 28, 2026

Stay Ahead of the Next One

Get instant alerts for getk2.org k2 extension for joomla

Be the first to know when new medium vulnerabilities affecting getk2.org k2 extension for joomla are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

getk2.org / K2 extension for Joomla

1.0-2.26

References

NVD ↗ CVE.org ↗ EPSS Data ↗

getk2.org: https://www.getk2.org/

Credits

Matan Bahar Niv Kochan