Product by TDuckCloud
Tduck-survey-form
10 known vulnerabilities in Tduck-survey-form (TDuckCloud), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-92567 | TDuck survey form through 5.0 Unauthorized Data Modification | 6.5 | |
| High | CVE-2026-92602 | TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL | 7.1 | |
| Medium | CVE-2026-100306 | TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement | 5.3 | |
| High | CVE-2026-109164 | TDuckCloud Tduck-survey-form: Authorization Bypass Through User-Controlled Key | 7.1 | |
| Medium | CVE-2026-100304 | TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check | 5.3 | |
| Medium | CVE-2026-100303 | TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints | 5.4 | |
| Medium | CVE-2026-111621 | TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key} | 4.3 | |
| Medium | CVE-2026-100305 | TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endpoint | 4.3 | |
| Medium | CVE-2026-109165 | TDuckCloud Tduck-survey-form: Authorization Bypass Through User-Controlled Key | 4.3 | |
| Medium | CVE-2026-109167 | TDuckCloud Tduck-survey-form: Authorization Bypass Through User-Controlled Key | 4.3 |