Skip to content
Threat Feed

Product

Formie (< 2.2.21)

1 brief RSS
high advisory

Formie Unauthenticated Submission Editing Vulnerability (CVE-2026-47266)

An unauthenticated user can modify existing Formie submissions by posting a known or guessed submission ID to `formie/submissions/save-submission`, affecting versions prior to 2.2.21 and versions 3.0.0 to 3.1.26.

Formie +1 unauthenticated-access data-manipulation cve cloud
1r 1c 1i