[ Vendor · 2 CVEs ]

onPhase

CVEs affecting onPhase published in the last 30 days, plus any onPhase CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-19677 23 Oct 2026 CVSS 9.3 onPhase FormsAn authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated remote attacker to…
CVE-2026-19678 23 Oct 2026 CVSS 8.7 onPhase FormsA server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated…