NVD CRITICAL: CVE-2026-75106 — OpnForm derives editable-submission secrets from sequential row identifiers usin...

Monday, August 17, 2026 at 09:16 PM UTC·Source: NIST NVD

Updated: Monday, August 17, 2026 at 10:00 PM UTC

Executive Summary

OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any submission. Attackers can read other respondents' full submission data through the submission-fetch endpoint or overwrite submissions by supplying predicted hashes to the answer endpoint.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-75106

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Aug 17, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

FDA Weighing Possible Regs for GenAI Medical Devices

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/fda-weighing-possible-regs-for-generative-ai-medical-devices-image_small-6-a-32593.jpg" align=right hspace=4>Agency Seeks Public Input on Risk-Based Oversight Approach Across Product Life Cycle The U.S. Food and Drug Administration is seeking public feedback on the varying risks and other considerations involving generat

1h agoBank Info Security

MEDIUMVulnerability

When AI Risk Becomes a Board Liability

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/when-ai-risk-becomes-board-liability-image_small-9-a-32594.jpg" align=right hspace=4>CIOs Can Strengthen Oversight Through Reporting, Records and Insurance Reviews AI failures can trigger financial, regulatory and reputational exposure that reaches the boardroom. Reed Smith partners Carolyn Rosenberg and Andy Moss explai

1h agoBank Info Security

CRITICALVulnerability

Critical GitLab Zero-Click Flaw Poses Mitigation Challenges

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.

CVE-2026-19478

2h agoDark Reading