Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File Upload

Joomla Balbooa Forms contains an unrestricted file upload vulnerability caused by lack of authentication checks, letting unauthenticated attackers upload executable files and achieve remote code execution. id: CVE-2026-56291 info: name: Balbooa Forms 2.4.1 - Unauthenticated Arbitrary File Upload...

CVE-2026-56291

creationtimestamp| type| source ---|---|--- 2026-07-09 12:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116889906648087046 2026-07-09 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq7ljhukn42i 2026-07-09 12:03:01+00:00| seen|...