MSRXMSRXSecurity
Vendors / Balbooa

Balbooa vulnerabilities being exploited

1 Balbooa flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Forms. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-07-10CVE-2026-56291 Forms
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE.

2026-07-13
Watch my Balbooa softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.