Balbooa Forms Vulnerability
Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.
CVSS Score
9.8
CRITICAL
Published
10 Jul 2026 00:00
Modified
N/A
Vendor
Balbooa
Product
Forms
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-434
Affected Systems
Balbooa
Forms
Balbooa
Forms
External Links
KEV Status
Known Exploited Vulnerability