Exploit for Unrestricted Upload of File with Dangerous Type in Balbooa Forms

## https://sploitus.com/exploit?id=48306BEC-279B-598E-9D34-6A07DFB2558F
**Auto Scanning Version & Exploit CVE-2026-56291 POC Joomla**

Unauthenticated Arbitrary File Upload leading to RCE in Balbooa Forms



**FOFA / Shodan**

FOFA:   body="com_baforms"

Shodan: http.html:"baforms"