Balbooa Forms Unauthenticated Arbitrary File Upload Vulnerability (CVE-2026-56291) — Critical Severity
A critical security flaw has been discovered and patched in Balbooa Forms, a popular drag-and-drop form builder for Joomla. This vulnerability, tracked as CVE-2026-56291, allows an attacker to upload malicious executable files without needing any login credentials. This can lead…
