Skip to content
OpenAdvisories

Vendor

SureForms

2 known vulnerabilities.

Products

SureForms 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-19500 Public exploit

    SureForms contains an uncontrolled resource consumption vulnerability

    The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, pr…

    SureForms SureForms
  • High 8.8
    CVE-2026-19501 Public exploit

    CVE-2026-19501

    CSV export functionality in Brainstorm Force SureForms version, <= 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on …

    SureForms SureForms