formie vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FO

Product

formie

by verbb · last CVE Sep 23, 2026

9

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 2High 4Medium 3Low 0

Severity

All severities9 Critical2 High4 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add formie to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-47266	8.7	0%	May 29	Formie: Unauthenticated front-end submission editing can overwrite existing submissions Affected: < 2.2.21; >= 3.0.0-beta.1, < 3.1.26
CVE-2026-76086	8.5	1%	Sep 23	Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials Affected: < 2.2.23; >= 3.0.0, < 3.1.31
CVE-2026-76087	8.2	0%	Sep 23	Formie: Unauthenticated users can overwrite incomplete submissions via submit action Affected: < 2.2.23; >= 3.0.0, < 3.1.31
CVE-2026-76089	7.7	0%	Sep 23	Formie: Missing authorization on sent notification resend modal exposes submission PII Affected: < 2.2.23; >= 3.0.0, < 3.1.31