CVE-2026-56069

HighCVSS 7.5

Published: 26/06/2026(UTC)Updated: 26/06/2026(UTC)Translated: 27/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile — higher than 22% of all known CVEs

Summary

An IDOR vulnerability in Toolset Forms versions up to 2.6.24 allows an unauthenticated attacker to access unauthorized data by manipulating object identifiers.

Risk Assessment

The risk involves the ability to read, modify, or delete sensitive data without authentication, potentially compromising system confidentiality and integrity.

Recommendation

It is recommended to immediately update the Toolset Forms plugin to the latest available version that addresses this vulnerability.

Original NVD description (English source)

Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions.