CVE-2026-14792

6.9 mediumEPSS 0.6%

Medium (6.9). EPSS 0.6% chance of exploitation in the next 30 days.

A security vulnerability has been detected in Formbricks 5.0.0. This impacts an unknown function of the file apps/web/modules/survey/link/actions.ts of the component Survey Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. Upgrading to version 5.1.0-rc.1 will fix this issue. The identifier of the patch is af6023b5ac3b030ffcea24fac799f76f3e3512c6. You should upgrade the affected component.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWEs: CWE-266, CWE-284
Published: 2026-07-06
Modified: 2026-07-07
Record from: the NVD, synced 2026-10-19

References

https://github.com/formbricks/formbricks/
https://github.com/formbricks/formbricks/commit/af6023b5ac3b030ffcea24fac799f76f3e3512c6
https://github.com/formbricks/formbricks/pull/8094
https://github.com/formbricks/formbricks/releases/tag/5.1.0-rc.1
https://vuldb.com/cve/CVE-2026-14792

Check your stack JSON