Skip to content

CVE record · 1 source

CVE-2026-112773

CVSS 8.8

Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig…

Vendor: Craft CMS, PHP
Product: Craft CMS, PHP
CVSS: 8.8
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 12d ago

Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig…

Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig sandbox by passing uncleansed criteria to getNext, getPrev, or getOwners.…

CVSS 8.8 CVE-2026-112773 Craft CMS PHP