Skip to content
Vulnerability intelligence

CVE-2026-56291

CVE-2026-56291 lets unauthenticated attackers upload executable files to sites running Balbooa Forms.

2026
What WebPulse reported · 1 analysis
No Login Required: A Form Plugin's Direct Path to Server Control

CVE-2026-56291 lets unauthenticated attackers upload executable files to sites running Balbooa Forms.

July 13, 2026
View CVE-2026-56291 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-50549 CVE-2026-50548 CVE-2026-48019 CVE-2026-35273 CVE-2026-11645 CVE-2026-8181 CVE-2026-47291