CVE

CVE-2026-56291

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Balbooa · Forms

Date added (CISA)

2026-07-10

Remediation due

2026-07-13

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Associated with

Related to

Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaignCorrelated cluster2026-09-16
DysphoriacampaignCorrelated cluster2026-08-24

Description

Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.

Source: NVD ↗ · CISA KEV Catalog ↗