CyberSecBulletin

SureForms vulnerabilities

We track 2 vulnerabilities in SureForms products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 18, 2026.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest SureForms vulnerabilities

  • 8.8 High severity

    SureForms: Improper Neutralization of Formula Elements in a CSV File

    CVE-2026-19501SureForms

    CSV export functionality in Brainstorm Force SureForms version, <= 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on a

  • 7.5 High severity

    SureForms: Uncontrolled Resource Consumption

    CVE-2026-19500SureForms

    The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, pre