CVE-2026-14792

MediumCVSS 6.5

Published: 06/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile - higher than 29% of all known CVEs

Summary

A security vulnerability was found in Formbricks 5.0.0 in the Survey Handler component (file apps/web/modules/survey/link/actions.ts). Manipulation leads to improper access controls, allowing remote exploitation.

Risk Assessment

An attacker can remotely gain unauthorized access to survey functionality, potentially leading to data confidentiality breaches or unauthorized actions in the system.

Recommendation

Upgrade Formbricks to version 5.1.0-rc.1 or apply the patch af6023b5ac3b030ffcea24fac799f76f3e3512c6 immediately.

Original NVD description (English source)

A security vulnerability has been detected in Formbricks 5.0.0. This impacts an unknown function of the file apps/web/modules/survey/link/actions.ts of the component Survey Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. Upgrading to version 5.1.0-rc.1 will fix this issue. The identifier of the patch is af6023b5ac3b030ffcea24fac799f76f3e3512c6. You should upgrade the affected component.