Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.4%	CVE-2026-19678onPhase Forms · Server-Side request forgery (SSRF) High8.7EPSS 0.4%2026-10-23CVE Database V5CVE-2026-19678 CVE-2026-19678 is a high-severity server-side request forgery (SSRF) vulnerability in onPhase Forms version 11.0.14. It allows an unauthenticated remote attacker to supply a malicious URL to a publicly accessible form, enabling access to sensitive internal Apache Solr data. The vulnerability affects the unauthenticated form service component. No patch or remediation details are provided in the available data. EPSS 0.4%Vulnerability onPhase #cwe-918	CVE Database V5	2026-10-23
Critical	9.3	EPSS 0.5%	CVE-2026-19677onPhase Forms · Missing authentication for critical function Critical9.3EPSS 0.5%2026-10-23CVE Database V5CVE-2026-19677 CVE-2026-19677 is a critical authentication bypass vulnerability in onPhase Forms version 11.0.14. It allows unauthenticated remote attackers to impersonate arbitrary tenant users, escalate privileges to TenantAdmin and Designer roles, and execute arbitrary operating system commands by manipulating registration parameters with valid tenant and user identifiers. EPSS 0.5%Vulnerability onPhase #cwe-306	CVE Database V5	2026-10-23

Showing 1–2 of 2 results