CVE-2026-28167

Super Forms versions up to 6.3.315 are vulnerable to an unauthenticated arbitrary file download, allowing attackers to access sensitive files on the server without authentication. This vulnerability poses a high risk as it can lead to data exposure and potential exploitation of the affected systems. Organizations using these versions should prioritize patching or upgrading to mitigate the risk of unauthorized file access.