CVE-2026-104478 | getformwork Formwork up to 2.3.12 BackupController path traversal

October 3, 2026 Yanac

A vulnerability was found in getformwork Formwork up to 2.3.12. It has been rated as critical. This affects the function BackupController. This manipulation causes path traversal.

This vulnerability is registered as CVE-2026-104478. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More