Known Vulnerabilities for Forms by Umbraco
Listed below are 1 of the newest known vulnerabilities associated with "Forms" by "Umbraco".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-84658 json | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor t... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-84654 json | In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS 2.568... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-84218 json | A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs... | Not Provided | 2026-09-01 | 2026-09-02 |
| CVE-2026-82291 json | HeyForm before 3.0.0-rc.8 reflects the request Origin header in CORS responses while allowing credentials, enabling cross-ori... | Not Provided | 2026-08-28 | 2026-08-31 |
| CVE-2026-81820 json | Affected versions of Flowintel construct timeline HTML using attacker-controllable MISP object fields such as: * objec... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-81772 json | Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles <= 3.0.31 versions. | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-81756 json | Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms <= 5.1.24 versions. | Not Provided | 2026-08-31 | 2026-09-02 |
| CVE-2026-81705 json | openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bun... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-81297 json | Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions. | Not Provided | 2026-08-31 | 2026-09-01 |
| CVE-2026-81296 json | Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack <= 6.2.12 versions. | Not Provided | 2026-08-31 | 2026-09-01 |