PatchSiren

formbricks CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM formbricks CVE published 2026-10-14

CVE-2026-110620

CVE-2026-110620 is a medium-severity vulnerability in Formbricks before version 4.9.0, allowing authenticated owners or managers of any organization to bypass authorization in server actions like resetSurveyAction and updateSegmentAction. This CVE record was published on 2026-10-14T14:16:57.917Z and has not been modified since then. The vulnerability is caused by a lack of proper authorization checks in s [truncated]