@offseq.bsky.social on Bluesky

Post

OffSequence

offseq.bsky.social

did:plc:t5t6qep2vfipbi7f54demwev

WebRehab Super Forms – Drag & Drop Form Builder <=6.3.316 hit by CRITICAL path traversal (CVE-2026-15896). Unauthenticated file reading possible if uploads are enabled. Restrict uploads & enable auth. https://radar.offseq.com/threat/cve-2026-15896-cwe-26-path-traversal-dirfilename-in-webrehab-sup... https://radar.offseq.com/threat/cve-2026-15896-cwe-26-path-traversal-dirfilename-in-webrehab-super-forms-drag-drop-form-builder-fbb29d81b0addec9

2026-10-02T06:00:26.857Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.