CVE-2026-19500 PUBLISHED

SureForms contains an uncontrolled resource consumption vulnerability

Assigner: certcc
Reserved: 10.08.2026 Published: 18.08.2026 Updated: 18.08.2026

The Entries component in Brainstorm Force SureForms version, less than 2.1.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the Entries interface, and trigger HTTP 500 errors via crafted form submissions.

Product Status

Vendor SureForms
Product SureForms
Versions
  • affected from 0 to 2.1.3 (excl.)

References

Problem Types

  • CWE-400 Uncontrolled Resource Consumption