VULNERABILITY INTELLIGENCE

CVE-2026-56291

CVSS score9.8 CRITICAL
EPSS probability14.85%
CISA KEVKnown exploited vulnerability
Published2026-07-09
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Vendor / product: Balbooa / Forms

Description

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Weakness classification

  • security@joomla.org: CWE-434

Primary references