CVE-2026-56291 Balbooa.Com Balbooa.Com Balbooa Forms…
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
- CVSS
- 10.0 Critical
- EPSS
- 15%
- Percentile
- 97
- Published
- 2026-07-09
- Force
- 11 of 12
- Public PoC
- 5
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red
On CISA’s exploited list
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
- Added
- 2026-07-10
- Federal patch deadline
- 2026-07-13
- Ransomware use
- not known