CVE-2026-81780

Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions.

Published Aug 31, 2026
CVSS 10.0 critical
0.5% chance of exploitation in the next 30 days (EPSS)

Affected software

hashthemes Hash Form

CVE-2026-81780 at the National Vulnerability Database