Skip to content

CVE record · 1 source

CVE-2026-115189

CVSS 8.8

A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic.

Vendor: PHP
Product: PHP
CVSS v3.1: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-1336
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

17

CVE NVD 5d ago

A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic.

A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic. The sandbox introduced to restrict user-uploaded theme templates (the fix for GHSA-9fx4-7cmj-47vg) does not fully enforce its…

CVSS 8.8 CVE-2026-115189 PHP