Question 1

What is CVE-2026-56291 — Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability?

Accepted Answer

Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.

Question 2

What is the authoritative source for CVE-2026-56291?

Accepted Answer

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-56291) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	9.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	14.85% probability of exploitation · percentile 96.6% · 2026-10-05T12:00:23Z
Last modified	2026-07-24

CVE-2026-56291Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Description

Scoring

CISA KEV entry