Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21 and 3.1.26, unauthenticated users could modify existing submissions by posting a known or guessed submission ID to formie/submissions/save-submission. This vulnerability is fixed in 2.2.21 and 3.1.26.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-29 | 2 | Disclosure2 |
| 2026-06-02 | 1 | General1 |
CVE-2026-47266: Formie Flaw Lets Attackers Overwrite Submissions https://thecybrdef.com/cve-2026-47266-formie-flaw-lets-attackers-overwrite-submissions/ #Cybertrending #Cybernewsdaily #Cybersecurity
Post summary
The provided text merely announces a CVE with a headline, lacking concrete details on the flaw, its exploitation, or mitigation.
CVE-2026-47266 Unauthenticated Submission Modification in Formie Craft CMS Plugin Before 2.2.21 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47266
Post summary
The post announces the discovery of CVE‑2026‑47266, describing an unauthenticated submission modification flaw in Formie Craft CMS Plugin versions prior to 2.2.21.
CVE-2026-47266 Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21 and 3.1.26, unauthenticated users could modify existing submissions by posting a known or guessed sub… https://www.cve.org/CVERecord?id=CVE-2026-47266
Post summary
The CVE-2026-47266 vulnerability in the Formie plugin allows unauthenticated users to modify form submissions; newer versions (2.2.21/3.1.26) address the issue.