civiform has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 4.5 (medium).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 4.5
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-639 1

Products

civiform 1

Follow civiform:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-107856Medium· 4.5CiviForm simplifies applications for government benefits programs by reusing applicant data across multiple benefit applications25

civiform vulnerabilities

CVEs affecting civiform, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-107856Medium· 4.5

CiviForm simplifies applications for government benefits programs by reusing applicant data across multiple benefit applications

CiviForm simplifies applications for government benefits programs by reusing applicant data across multiple benefit applications. Prior to 3.33.0, GET /admin/tiDash/editClientForm/:accountId verifies that the requester is a Trusted Inter…

▾ Sunlitciviform · civiformEPSS 0.23%via NVD

civiform vulnerabilities (CVEs) · VulnSea