CVE-2026-56291: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.
Other sources
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56291?
CVE-2026-56291 has a critical severity rating of 10, indicating it poses a significant threat.
How do I fix CVE-2026-56291?
To fix CVE-2026-56291, upgrade the Balbooa Forms extension to version 2.4.1 or later.
What is the risk associated with CVE-2026-56291?
The risk associated with CVE-2026-56291 is rated at 87, highlighting the potential for serious exploitation.
What type of vulnerability is CVE-2026-56291?
CVE-2026-56291 is an unauthenticated arbitrary file upload vulnerability in the Balbooa Forms extension.
What could happen if CVE-2026-56291 is exploited?
Exploitation of CVE-2026-56291 can lead to remote code execution, allowing attackers full control over the affected system.