CVE-2026-76087 | Verbb Formie Plugin up to 2.2.22/3.1.30 Submissions Controller actionSubmit submissionId privileges management

September 23, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Verbb Formie Plugin up to 2.2.22/3.1.30. This vulnerability affects the function SubmissionsController::actionSubmit of the component Submissions Controller. Performing a manipulation of the argument submissionId results in improper privilege management.

This vulnerability is reported as CVE-2026-76087. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More