Vulnerability intelligence

CVE-2026-56291

Official description is being retrieved from NVD — refresh shortly.

CVSS Score

10

Critical

EPSS — Exploit Probability

0.0%

Riskier than 0% of all CVEs

Exploitation

Confirmed in the wild

KEV since 2026-07-10

Remediation

unknown

Federal deadline 2026-07-13

NVD entry PoC / advisory CISA KEV

2 articles across 2 outlets · first covered Jul 10, 2026 · latest Jul 10, 2026

Tracked incidents

vulnerability open 2 articles

CISA adds Balbooa Forms file‑upload flaw (CVE-2026-56291) to KEV catalogue

Coverage timeline

CISA KEV Catalog Highlights CVE-2026-56291 Flaw in Balbooa Forms
www.cisa.gov · Jul 10, 2026
CVE-2026-56291 lets attackers hijack systems via Balbooa Forms
cisa.gov · Jul 10, 2026