Formbricks - vulnerabilities (CVEs)

4 CVEs in 1 products, 2 in the last 30 days, newest from 2026-10-14.

Products

• Formbricks - 3 CVEs

Newest CVEs of Formbricks

• CVE-2026-110620 - CVSS 6.8 (medium), 2026-10-14: Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that fail to verify…
• CVE-2026-105090 - CVSS 5.1 (medium), 2026-10-03: Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission…
• CVE-2026-14792 - CVSS 6.9 (medium), 2026-07-06: A security vulnerability has been detected in Formbricks 5.0.0. This impacts an unknown function of the file apps/web/modules/survey/link/actions.ts of the…
• CVE-2025-59934 - CVSS 9.4 (critical), 2025-09-26: Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a…