CVE-2026-96335

Summary

A missing authorization flaw in Forminator allows attackers to bypass access controls and perform unauthorized actions, potentially leading to data manipulation or system compromise. This vulnerability affects versions up to 1.57.2.

Exploitability

Exploitation is relatively straightforward with no special preconditions required, as the vulnerability stems from incorrectly configured access control security levels.

Blast radius

The impact could be significant across all Forminator features that rely on proper authorization checks, potentially allowing attackers to manipulate forms and related data without authentication.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.57.3 or later to remediate this missing authorization vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.