Vverbb

Products

Exploited and recent CVEs

• CVE-2026-76087 High 8.2 Formie: Unauthenticated users can overwrite incomplete submissions via submit action 0.4%
• CVE-2026-76086 High 8.5 Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials 0.5%
• CVE-2026-76089 High 7.7 Formie: Missing authorization on sent notification resend modal exposes submission PII 0.4%
• CVE-2026-52889 Critical 9.8 Formie: Server-Side Template Injection in Formie Hidden field defaults 1.3%
• CVE-2026-47266 High 8.7 Formie: Unauthenticated front-end submission editing can overwrite existing submissions 0.3%
• CVE-2026-45697 Critical 9.8 Formie: Pre-authenticated server-side template injection in Hidden fields 0.5%
• CVE-2025-32426 Medium 4.6 Formie has a XSS vulnerability for email notification content for preview 0.2%
• CVE-2025-32427 Medium 5.3 Formie has a XSS vulnerability for importing forms 0.2%
• CVE-2024-35191 Medium 4.4 verbb/formie Server-Side Template Injection for variable-enabled settings 0.3%