Dashboard / CVE-2026-56291

CVE-2026-56291

CRITICAL CISA KEV
ACT NOW Priority: 1.49 BB Relevance: 83/100
Published: 2026-07-09 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.

CISA Known Exploited Vulnerability

Vendor / Product Balbooa — Forms
Date Added 2026-07-10
Remediation Due 2026-07-13
https://www.balbooa.com/joomla-forms ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-56291

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
balbooa forms < 2.4.1

References & Advisories (3)

Bug Bounty Relevance

83 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction
✓ Known exploited (KEV)

CVSS Score

10.0 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Red

EPSS — Exploitation Probability

14.85%
Raw Score 0.148540
Percentile 96.7%
Date 2026-10-28

Intelligence Sources

kev ref →
nvd ref →

External Links