opnform vulnerabilities

Products

• opnform/opnform 1

Latest opnform CVEs

Newest publication first

1. CVE-2026-75106 OpnForm Editable Submission Secret Derivation via Empty Hashids Salt

   Published 2026-08-17

   Critical·CVSS 9.3

   OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any submission. Attackers can read other respondents' full submission data through the submission-fetch e...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.