{"schema":"vulnpedia.poc/1","cve":"CVE-2026-56291","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-07-10","ransomware":false},"epss":{"score":0.14854,"percentile":0.9667},"cvss":{"version":"4.0","score":10,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d2cf0477c63a","executable":false,"sourceId":"d2cf0477c63a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d2cf0477c63a","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/xdb/d2cf0477c63a"}],"repositoryUrl":"https://github.com/0xdenis77/CVE-2026-56291"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3a61b99fedf8","executable":false,"sourceId":"3a61b99fedf8","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3a61b99fedf8","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/xdb/3a61b99fedf8"}],"repositoryUrl":"https://github.com/shinthink/CVE-2026-56291"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e4b0075b04b0","executable":false,"sourceId":"e4b0075b04b0","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e4b0075b04b0","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/xdb/e4b0075b04b0"}],"repositoryUrl":"https://github.com/theendofabbys/CVE-2026-56291"}],"poc_candidates":[{"url":"https://github.com/shinthink/CVE-2026-56291","source":"poc-in-github","sourceId":"CVE-2026-56291","description":"Balbooa Forms (com_baforms) < 2.4.1 — Unauthenticated File Upload to RCE via form.uploadAttachmentFile | CVSS 9.8 | CISA KEV","modified":"2026-07-31T07:22:08Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56291","url":"https://github.com/shinthink/CVE-2026-56291"},{"source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-07-31T07:22:08Z","url":"https://github.com/shinthink/CVE-2026-56291"}],"tags":[]},{"url":"https://github.com/rimbadirgantara/CVE-2026-56291.yaml","source":"poc-in-github","sourceId":"CVE-2026-56291","description":"nuclei template for CVE-2026-56291","modified":"2026-07-13T14:53:56Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56291","url":"https://github.com/rimbadirgantara/CVE-2026-56291.yaml"},{"source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-07-13T14:53:56Z","url":"https://github.com/rimbadirgantara/CVE-2026-56291.yaml"}],"tags":[]},{"url":"https://github.com/0xdenis77/CVE-2026-56291","source":"poc-in-github","sourceId":"CVE-2026-56291","description":"Mendeteksi versi (passive detection) & Exploitation CVE POC","modified":"2026-07-14T20:55:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56291","url":"https://github.com/0xdenis77/CVE-2026-56291"},{"source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-07-14T20:55:49Z","url":"https://github.com/0xdenis77/CVE-2026-56291"}],"tags":[]},{"url":"https://github.com/ChiefYoru/CVE-2026-56291_PoC","source":"poc-in-github","sourceId":"CVE-2026-56291","description":"The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.","modified":"2026-07-18T22:12:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56291","url":"https://github.com/ChiefYoru/CVE-2026-56291_PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-07-18T22:12:23Z","url":"https://github.com/ChiefYoru/CVE-2026-56291_PoC"}],"tags":[]},{"url":"https://github.com/theendofabbys/CVE-2026-56291","source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-10-08T03:32:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56291","url":"https://github.com/theendofabbys/CVE-2026-56291"},{"source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-10-08T03:32:20Z","url":"https://github.com/theendofabbys/CVE-2026-56291"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-56291 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-56291/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56291.yaml","template":"http/cves/2026/CVE-2026-56291.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-56291%22&type=repositories","executable":false}]}