Balbooa: community verdicts

1 notable / known-exploited Balbooa CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Balbooa CVE, see NVD ↗.

Exploitation first, with newly exploited CVEs rising above old ones

CVE-2026-56291CRIT 9.8KEVEPSS 15%
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.