CVE-2026-14894, a critical Super Forms vulnerability, is exploited in the wild. The 9.8 CVSS file upload flaw enables unauthenticated remote code execution. Related Posts: Plex Issues Urgent Security Update for Media Server and Desktop Critical WHMCS Security Update Patches RCE Flaws Critical SonicWall NSM Vulnerabilities Patched The post Super Forms Vulnerability Exploited in the Wild: 13,000 Sites Face 9.8 CVSS Remote Code Execution appeared first on Daily CyberSecurity.