What’s Vulnerable › Products

TDuckCloud tduck-survey-form vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your TDuckCloud tduck-survey-form version is affected

Latest TDuckCloud tduck-survey-form vulnerabilities

• CVE-2026-111621 — TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key} (CVSS 4.3)
• CVE-2026-109167 — TDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/save (CVSS 4.3)
• CVE-2026-109165 — TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create (CVSS 4.3)
• CVE-2026-109164 — TDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey} (CVSS 7.1)
• CVE-2026-100306 — TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement (CVSS 5.3)
• CVE-2026-100305 — TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endpoint (CVSS 4.3)
• CVE-2026-100304 — TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check (CVSS 5.3)
• CVE-2026-100303 — TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints (CVSS 5.4)
• CVE-2026-92602 — TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL (CVSS 7.1)
• CVE-2026-92567 — TDuck survey form through 5.0 Unauthorized Data Modification (CVSS 6.5)