Formalms CVEs & Vulnerabilities

1 CVEs affecting Formalms products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

formalms 1

CVE-2026-26744MEDIUMpoc

A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endpoint. The application returns different error messages for valid and invalid usernames allowing an unauthenticated attacker to determine which usernames are registered in the system through observable response discrepancy.

20 Feb 2026

5.3

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database