Patch Forecast
Amber warning
Patch this week.

CVE-2026-119481

Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows…

Risk score
64/100
CVSS
9.8 v3.1
Published
4 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is
The Crocoblock JetFormBuilder jetformbuilder has a vulnerability allowing Privilege Escalation. An attacker could gain high privileges on the system.
Affected
{'products': ['JetFormBuilder'], 'packages': [], 'versions': ['from n/a through 3.6.7.1']}
Fix
Check the linked advisory for the concrete fix.
Exploitation
No known exploitation

Why it is Amber

  • CVSS 9.8 critical
  • Remotely exploitable without logging in

References

Original description

Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.6.7.1.

Last activity 4 Nov 2026. Patch Forecast updates every hour.