{"uuid": "67732bd9-c3a2-4a4b-9317-5bb60c6c1dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15896", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117369787168473171", "content": "CVE-2026-15896 (CRITICAL): Path traversal in WebRehab Super Forms \u2013 Drag & Drop Form Builder <=6.3.316 lets unauthenticated users read arbitrary files via vulnerable uploads. Enable 'file_upload_auth' for some mitigation. https://radar.offseq.com/threat/cve-2026-15896-cwe-26-path-traversal-dirfilename-in-webrehab-super-forms-drag-drop-form-builder-fbb29d81b0addec9 #OffSeq #WordPress #Vuln #AppSec", "creation_timestamp": "2026-10-02T06:00:25.450748Z"}