CVE-2026-56291 Scanner
CVE-2026-56291 Scanner - Unrestricted File Upload vulnerability in Balbooa Forms
Used 2.4k times · 4.2k assets checked · domain, subdomain, ipv4
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2026-56291
10.0
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
balbooa.com balbooa forms extension for joomla
Updated Nov 6, 2026View on NVD →
S4E scanner
CVE history: balbooa.com balbooa forms extension for joomla
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →