The vulnerability CVE-2026-32484 affects BoldGrid weForms versions up to 1.6.26 and is caused by deserialization of untrusted data, which enables object injection attacks. This can allow an attacker to execute arbitrary code or manipulate application behavior, resulting in high impact on confidentiality, integrity, and availability. The CVSS v3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available to confirm remediation status.

Successful exploitation of this vulnerability could lead to full compromise of the affected system, including unauthorized disclosure of information, modification of data, and disruption of service. The vulnerability is remotely exploitable without privileges but requires user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider disabling or restricting access to the vulnerable component if possible.