Firetruck

CVE-2026-56291

KEV
Updated Aug 12, 2026 · PUBLISHED
View KEV entry →

Description

Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
balbooa.com Balbooa Forms extension for Joomlabalbooa.com / balbooa.com Balbooa Forms extension for Joomla1.0-2.4.0affected