Log in Start free

Formbricks

Products

ProductCVEsExploitedLatest
Formbricks3–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2026-110620 Medium 6.8 Formbricks before 4.9.0 Cross-Organization IDOR in Server Actions via organizationId 0.6%
  • CVE-2026-105090 Medium 5.1 Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only re 0.3%
  • CVE-2025-59934 Critical 9.4 Formbricks missing JWT signature verification 9.1%