https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 18:30:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-250591 EUVD-2026-250591 https://cve.radiocsirt.org/vuln/euvd-2026-250591 https://cve.radiocsirt.org/vuln/fkie_cve-2025-57811 <p>Craft is a platform for creating digital experiences. From versions 4.0.0-RC1 to 4.16.5 and 5.0.0-RC1 to 5.8.6, there is a potential remote code execution vulnerability via Twig SSTI (Server-Side Template Injection). This is a follow-up to CVE-2024-52293. This vulnerability has been patched in versions 4.16.6 and 5.8.7.</p> <p>Craft is a platform for creating digital experiences. From versions 4.0.0-RC1 to 4.16.5 and 5.0.0-RC1 to 5.8.6, there is a potential remote code execution vulnerability via Twig SSTI (Server-Side Template Injection). This is a follow-up to CVE-2024-52293. This vulnerability has been patched in versions 4.16.6 and 5.8.7.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-57811 https://cve.radiocsirt.org/vuln/ghsa-crcq-738g-pqvc <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>Note that users must have administrator access to the Craft Control Panel, and [allowAdminChanges](https://craftcms.com/docs/5.x/reference/config/general.html#allowadminchanges) must be enabled for this to work, which is against Craft CMS&#39; recommendations for any non-dev environment.</p> <p>https://craftcms.com/knowledge-base/securing-craft#set-allowAdminChanges-to-false-in-production</p> <p>Note: This is a follow-up to [GHSA-f3cw-hg6r-chfv](https://github.com/craftcms/cms/security/advisories/GHSA-f3cw-hg6r-chfv)</p> <p>Users should update to the patched versions (4.16.6 and 5.8.7) to mitigate the issue.</p> <p>Resources: https://github.com/craftcms/cms/pull/17612</p> <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>Note that users must have administrator access to the Craft Control Panel, and [allowAdminChanges](https://craftcms.com/docs/5.x/reference/config/general.html#allowadminchanges) must be enabled for this to work, which is against Craft CMS&#39; recommendations for any non-dev environment.</p> <p>https://craftcms.com/knowledge-base/securing-craft#set-allowAdminChanges-to-false-in-production</p> <p>Note: This is a follow-up to [GHSA-f3cw-hg6r-chfv](https://github.com/craftcms/cms/security/advisories/GHSA-f3cw-hg6r-chfv)</p> <p>Users should update to the patched versions (4.16.6 and 5.8.7) to mitigate the issue.</p> <p>Resources: https://github.com/craftcms/cms/pull/17612</p> https://cve.radiocsirt.org/vuln/ghsa-crcq-738g-pqvc