CVE-2026-97296

Published 16 October 2026 · tracked since 17 October 2026

Description

Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-63618 HIGH 7.5
• CVE-2026-111391 HIGH 8.1
• CVE-2026-92766 HIGH 7.5
• CVE-2026-111311 HIGH 8.8
• CVE-2026-75903 HIGH 8.1
• CVE-2026-92553 HIGH 8.8
• CVE-2026-92115 HIGH 8.8
• CVE-2026-110015 HIGH 8.8
• CVE-2026-110135 HIGH 7.4
• CVE-2026-104730 CRITICAL 9.8

→ Open the live CVE board · all tools