Paper/Archive/CVE-2026-56291

CVE-2026-56291

balbooa.com balbooa.com Balbooa Forms extension for Joomla — Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1

KEV · due 13 Jul EPSS 15%public exploit SSVC act CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 In CISA KEV+3030.0 EPSS percentile 96.7.967 × 2019.3 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Affected

ProductAffectedFixed inSource

balbooa.com Balbooa Forms extension for Joomla1.0-2.4.0–CNA

Scores by source

Joomla (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refbalbooa.com/joomla-forms writeupmysites.guru/blog/balbooa-forms-unauthenticated-file-upload-flaw refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56291 kevcisa.gov/known-exploited-vulnerabilities-catalog