Actively exploited vulnerabilities affecting Balbooa products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-56291https://wildfortech.com/security#CVE-2026-56291This vulnerability in Balbooa Forms allows anyone — without logging in — to upload executable files to a affected system. Because there are no authentication checks blocking dangerous file types, an attacker can follow up by running that uploaded code on the server, achieving full remote code execution. This effectively hands an unauthenticated outsider complete control over the underlying system, making it a critical risk for any internet-facing deployment of the product.Fri, 10 Jul 2026 00:00:00 GMTBalbooaForms