Post
OffSequence
offseq.bsky.social
did:plc:t5t6qep2vfipbi7f54demwev
Super Forms – Drag & Drop Form Builder (<=6.3.316) hit by CRITICAL CVE-2026-17609: unauthenticated directory deletion risk if 'Delete files after form submissions' is on. Disable this setting ASAP. https://radar.offseq.com/threat/cve-2026-17609-cwe-434-unrestricted-upload-of-file-with-dangerous-t...
https://radar.offseq.com/threat/cve-2026-17609-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-webrehab-super-forms-drag-f4228d5a610b35bd
2026-10-08T06:00:29.257Z