{"schema":"vulnpedia.research/1","cve":"CVE-2026-56291","references":[{"url":"https://www.balbooa.com/joomla-forms","tags":["product","Product"],"source":"mitre","sourceId":"Joomla","modified":"2026-08-12T13:52:32.561Z","origins":[{"source":"mitre","sourceId":"Joomla","modified":"2026-08-12T13:52:32.561Z","url":"https://www.balbooa.com/joomla-forms"},{"source":"nvd","sourceId":"CVE-2026-56291","modified":"2026-10-25T17:10:00.197","url":"https://www.balbooa.com/joomla-forms"}]},{"url":"https://mysites.guru/blog/balbooa-forms-unauthenticated-file-upload-flaw/","tags":["third-party-advisory","Exploit","Third Party Advisory","KEV report"],"source":"mitre","sourceId":"Joomla","modified":"2026-08-12T13:52:32.561Z","origins":[{"source":"mitre","sourceId":"Joomla","modified":"2026-08-12T13:52:32.561Z","url":"https://mysites.guru/blog/balbooa-forms-unauthenticated-file-upload-flaw/"},{"source":"nvd","sourceId":"CVE-2026-56291","modified":"2026-10-25T17:10:00.197","url":"https://mysites.guru/blog/balbooa-forms-unauthenticated-file-upload-flaw/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://mysites.guru/blog/balbooa-forms-unauthenticated-file-upload-flaw/"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56291","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-07-11T03:55:21.807Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-07-11T03:55:21.807Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56291"},{"source":"nvd","sourceId":"CVE-2026-56291","modified":"2026-10-25T17:10:00.197","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56291"}]},{"source":"euvd","sourceId":"EUVD-2026-42573","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42573","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-42573","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42573"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://previdian.com/CVE-2026-56291","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://previdian.com/CVE-2026-56291"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://mysites.guru/blog/gridbox-23-critical-vulnerabilities/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://mysites.guru/blog/gridbox-23-critical-vulnerabilities/"}]},{"url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-08-30","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-08-30"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-09-09","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-09-09"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-09-26","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-09-26"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-10-12","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-10-12"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-10-13","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-10-13"}]},{"url":"https://vulncheck.com/xdb/d2cf0477c63a","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"d2cf0477c63a","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d2cf0477c63a","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/xdb/d2cf0477c63a"}]},{"url":"https://github.com/0xdenis77/CVE-2026-56291","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"d2cf0477c63a","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d2cf0477c63a","modified":"2026-07-08T00:00:00Z","url":"https://github.com/0xdenis77/CVE-2026-56291"}]},{"url":"https://vulncheck.com/xdb/3a61b99fedf8","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"3a61b99fedf8","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3a61b99fedf8","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/xdb/3a61b99fedf8"}]},{"url":"https://github.com/shinthink/CVE-2026-56291","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"3a61b99fedf8","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3a61b99fedf8","modified":"2026-07-08T00:00:00Z","url":"https://github.com/shinthink/CVE-2026-56291"}]},{"url":"https://vulncheck.com/xdb/e4b0075b04b0","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"e4b0075b04b0","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e4b0075b04b0","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/xdb/e4b0075b04b0"}]},{"url":"https://github.com/theendofabbys/CVE-2026-56291","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"e4b0075b04b0","modified":"2026-07-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e4b0075b04b0","modified":"2026-07-08T00:00:00Z","url":"https://github.com/theendofabbys/CVE-2026-56291"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/shinthink/CVE-2026-56291","source":"poc-in-github","sourceId":"CVE-2026-56291","description":"Balbooa Forms (com_baforms) < 2.4.1 — Unauthenticated File Upload to RCE via form.uploadAttachmentFile | CVSS 9.8 | CISA KEV","modified":"2026-07-31T07:22:08Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56291","url":"https://github.com/shinthink/CVE-2026-56291"},{"source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-07-31T07:22:08Z","url":"https://github.com/shinthink/CVE-2026-56291"}],"tags":[]},{"url":"https://github.com/rimbadirgantara/CVE-2026-56291.yaml","source":"poc-in-github","sourceId":"CVE-2026-56291","description":"nuclei template for CVE-2026-56291","modified":"2026-07-13T14:53:56Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56291","url":"https://github.com/rimbadirgantara/CVE-2026-56291.yaml"},{"source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-07-13T14:53:56Z","url":"https://github.com/rimbadirgantara/CVE-2026-56291.yaml"}],"tags":[]},{"url":"https://github.com/0xdenis77/CVE-2026-56291","source":"poc-in-github","sourceId":"CVE-2026-56291","description":"Mendeteksi versi (passive detection) & Exploitation CVE POC","modified":"2026-07-14T20:55:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56291","url":"https://github.com/0xdenis77/CVE-2026-56291"},{"source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-07-14T20:55:49Z","url":"https://github.com/0xdenis77/CVE-2026-56291"}],"tags":[]},{"url":"https://github.com/ChiefYoru/CVE-2026-56291_PoC","source":"poc-in-github","sourceId":"CVE-2026-56291","description":"The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.","modified":"2026-07-18T22:12:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56291","url":"https://github.com/ChiefYoru/CVE-2026-56291_PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-07-18T22:12:23Z","url":"https://github.com/ChiefYoru/CVE-2026-56291_PoC"}],"tags":[]},{"url":"https://github.com/theendofabbys/CVE-2026-56291","source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-10-08T03:32:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-56291","url":"https://github.com/theendofabbys/CVE-2026-56291"},{"source":"poc-in-github","sourceId":"CVE-2026-56291","modified":"2026-10-08T03:32:20Z","url":"https://github.com/theendofabbys/CVE-2026-56291"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"d2cf0477c63a","url":"https://vulncheck.com/xdb/d2cf0477c63a","cve":"CVE-2026-56291","dateAdded":"2026-07-13T19:50:06Z","modified":"2026-07-08T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/0xdenis77/CVE-2026-56291","observations":[{"dateAdded":"2026-07-13T19:50:06Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"d2cf0477c63a","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/xdb/d2cf0477c63a"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"3a61b99fedf8","url":"https://vulncheck.com/xdb/3a61b99fedf8","cve":"CVE-2026-56291","dateAdded":"2026-07-14T17:51:10Z","modified":"2026-07-08T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/shinthink/CVE-2026-56291","observations":[{"dateAdded":"2026-07-14T17:51:10Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"3a61b99fedf8","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/xdb/3a61b99fedf8"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"e4b0075b04b0","url":"https://vulncheck.com/xdb/e4b0075b04b0","cve":"CVE-2026-56291","dateAdded":"2026-10-08T03:31:32Z","modified":"2026-07-08T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/theendofabbys/CVE-2026-56291","observations":[{"dateAdded":"2026-10-08T03:31:32Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"e4b0075b04b0","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/xdb/e4b0075b04b0"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-07-08T00:00:00Z","modified":"2026-07-08T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":true,"vendorProject":"Balbooa","product":"Forms","dueDate":"2026-07-13T00:00:00Z","cisaDateAdded":"2026-07-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","modified":"2026-07-08T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","catalog":"VulnCheck KEV","kind":"report","url":"https://mysites.guru/blog/balbooa-forms-unauthenticated-file-upload-flaw/","dateAdded":"2026-07-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","url":"https://mysites.guru/blog/balbooa-forms-unauthenticated-file-upload-flaw/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-56291","dateAdded":"2026-07-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","url":"https://previdian.com/CVE-2026-56291"},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","catalog":"VulnCheck KEV","kind":"report","url":"https://mysites.guru/blog/gridbox-23-critical-vulnerabilities/","dateAdded":"2026-07-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","url":"https://mysites.guru/blog/gridbox-23-critical-vulnerabilities/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape","dateAdded":"2026-08-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-08-30","dateAdded":"2026-08-30T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-08-30"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-09-09","dateAdded":"2026-09-09T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-09-09"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-09-26","dateAdded":"2026-09-26T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-09-26"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-10-12","dateAdded":"2026-10-12T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-10-12"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-10-13","dateAdded":"2026-10-13T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-56291","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-56291&date=2026-10-13"}]}]}