🔴

CISA Known Exploited Vulnerability

This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.

CVE

CVE-2026-56291

10.0

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

balbooa.com balbooa forms extension for joomla

Updated Nov 10, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File Upload

Joomla Balbooa Forms contains an unrestricted file upload vulnerability caused by lack of authentication checks, letting unauthenticated attackers upload executable files and achieve remote code execution. References: https://nvd.nist.gov/vuln/detail/CVE-2026-56291 https://www.cisa.gov/known-exploited-vulnerabilities-catalog Remediation: Update to the latest version of Balbooa Forms extension.

10 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: balbooa.com balbooa forms extension for joomla

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →