Question 1

What is CVE-2026-47266 — CVE-2026-47266?

Accepted Answer

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21 and 3.1.26, unauthenticated users could modify existing submissions by posting a known or guessed submission ID to formie/submissions/save-submission. This vulnerability is fixed in 2.2.21 and 3.1.26.

Question 2

What is the authoritative source for CVE-2026-47266?

Accepted Answer

CVE-2026-47266 (CVE-2026-47266) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-47266CVE-2026-47266

Description

Scoring