{"cvss":9.8,"datePublished":"","dateUpdated":"","description":"Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value) | Affected: WebRehab / Super Forms – Drag & Drop Form Builder | CVSS: 9.8 (CRITICAL) | EPSS: 0.05265 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-14894","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"Super Forms – Drag & Drop Form Builder","severity":"CRITICAL","source":"circl_kev","title":"CVE-2026-14894","vendor":""}