VULNERABILITY INTELLIGENCE
CVE-2026-79988
EPSS probability0.45%
CISA KEVNot currently listed
Published2026-08-27
Last modified2026-08-28
Description
The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading to authenticated RCE similar to previously disclosed vulnerabilities.
Weakness classification
- 7004884b-51e2-48e8-b4a2-5ca29e80453e: CWE-693