CVE-2026-56291: Balbooa Forms Unrestricted Upload of File with Dangerous

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability. Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.

• CISA KEV-listed (remediation due 2026-07-13)
• EPSS 76.1% (99.5% percentile)
• CVSS 10 critical

Related briefings

• CISA flags four critical Joomla add-on bugs as exploited 2026-08-02

Browse the CVE database

Read the full analysis on IntelFusions