FAIL › dossier
Forms
PRODUCT· dossier confidence 50%
Balbooa Forms, a form builder, has experienced severe security vulnerabilities, including unauthenticated remote code execution through file uploads.
PROFILE
CategorySoftwareWhat they doBalbooa Forms is a web-based form builder that allows users to create forms for various purposes.
SECURITY POSTURE
The company has had multiple high-severity vulnerabilities disclosed, indicating potential security posture issues.
Notable failures
- CVE-2026-56291 (high [RCE0day])
- CVE-2026-56291 (critical [RCE0day])
Patterns: Unauthenticated arbitrary file upload leading to remote code execution.
FAILURE HISTORY · 2
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-07-10 | CVE-2026-56291 | high | Balbooa Forms allows unauthenticated arbitrary file upload leading to full RCE. |
| 2026-07-09 | CVE-2026-56291 | critical | Balbooa Forms extension enables unauthenticated RCE via arbitrary file upload. |
Open questions: Has the company addressed the noted vulnerabilities effectively? · What is the current security posture of Balbooa Forms?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-06 03:46:57.907555+00:00