A server-side request forgery (SSRF) vulnerability exists in the unauthenticated form service of onPhase Forms version 11.0.14. This allows an unauthenticated remote attacker to access sensitive internal Apache Solr data by providing an attacker-controlled URL through a publicly accessible form. The vulnerability's impact is significant due to the potential for unauthorized data access and disruption of i [truncated]
CVE-2026-19677 is a critical authentication bypass vulnerability in frevvo version 11.0.14 that allows unauthenticated remote attackers to authenticate as arbitrary tenant users, gain TenantAdmin and Designer privileges, and execute operating system commands. This vulnerability requires verification of affected versions, exploitation, and remediation from official sources. Defenders responsible for frevvo [truncated]
