poslední zpráva
SPOJENO AI EPSS 0.01 (nejvyšší)
Craft CMS security advisory (AV26-1067)
Serial number: AV26-1067 Date: October 20, 2026 As of October 19, 2026, Craft CMS is affected by vulnerabilities in the following product: Craft CMS Prior to 4.18.8 Prior to 5.11.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Authenticated RCE via Twig group filter array-callable Twig sandbox allowlist bypass discloses sensitive values Authenticated RCE: Twig sandbox "on/as" behavior injection via…
Craft CMS CA IT
CVE v události 8
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-112770 | 8.8 3.1 · VulnCheck 8.7 4.0 · VulnCheck | – | 0.01 |
| CVE-2026-112771 | 7.1 4.0 · VulnCheck 6.5 3.1 · VulnCheck | – | 0.00 |
| CVE-2026-112772 | 8.8 3.1 · VulnCheck 8.7 4.0 · VulnCheck | – | 0.01 |
| CVE-2026-112773 | 8.8 3.1 · VulnCheck 8.7 4.0 · VulnCheck | – | 0.01 |
| CVE-2026-112774 | 8.7 4.0 · VulnCheck 7.2 3.1 · VulnCheck | – | 0.01 |
| CVE-2026-112775 | 8.7 4.0 · VulnCheck 7.5 3.1 · VulnCheck | – | 0.00 |
| CVE-2026-112776 | 9.8 3.1 · VulnCheck 9.3 4.0 · VulnCheck | – | 0.00 |
| CVE-2026-112777 | 8.7 4.0 · VulnCheck 7.2 3.1 · VulnCheck | – | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.
Jak se o tom psalo 2
-
· Cyber Centre Kanada CA nadpis události
Craft CMS security advisory (AV26-1067)
Serial number: AV26-1067 Date: October 20, 2026 As of October 19, 2026, Craft CMS is affected by vulnerabilities in the following product: Craft CMS Prior to 4.18.8 Prior to 5.11.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Authenticated RCE via Twig group filter array-callable Twig sandbox allowlist bypass discloses sensitive values Authenticated RCE: Twig sandbox "on/as" behavior injection via…
-
· CSIRT Itálie (ACN) IT
Risolte vulnerabilità in Craft CMS
Aggiornamenti di sicurezza sanano alcune vulnerabilità, di cui una con gravità “critica” e 7 con gravità “alta”, in Craft CMS, noto strumento per la gestione di siti web e-commerce. Tali vulnerabilità potrebbero consentire a un attaccante remoto, in alcuni casi non autenticato, di eludere i meccanismi di autenticazione, di accedere a informazioni sensibili o di eseguire codice arbitrario sui sistemi interessati.