CVE-2026-48909 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-502	Deserialization of Untrusted Data The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

익스플로잇 정보

Exploit Database EDB-ID : 52617

게시일 : 2026-07-06 00h00 +00:00
저자 : Amin İsayev
EDB 검증됨 : No

참고 자료

https://www.joomshaper.com/