Skip to content
OpenAdvisories

Vendor

onPhase

2 known vulnerabilities.

Products

onPhase Forms 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-19677

    Authentication Bypass Leading to Server-Side Command Execution

    An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated remote attacker to authenticate as an arbitrary tenant user, obtain TenantAdmin and Designer privileges, and execute arbitrary ope…

    onPhase onPhase Forms