Read the docs

SureForms

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

SureForms records in CISA KEV

No SureForms vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-15876 CVE-2026-19501 · GHSA-fwh8-67c4-8cgg

CSV injection in SureForms

Priority HIGH 73

CSV export functionality in Brainstorm Force SureForms version, <= 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attac…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00556 Published 2026-08-18 No fix listed CWE-1236
TI-2026-15875 CVE-2026-19500 · GHSA-xc26-q9g5-f99x

SureForms contains an uncontrolled resource consumption vulnerability

Priority LOW 34

The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00582 Published 2026-08-18 Fixed in 2.12.3 CWE-400
Open these records in search →