Unrated severityOSV Advisory· Published Jun 26, 2026· Updated Jun 26, 2026

Server side template inject (SSTI) in Edgewall Genshi Template Engine

CVE-2026-0685

Description

Server side template inject (SSTI) in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution (RCE) via crafted template expressions.

Affected products

Firestats/GenshiOSV2 versions
0.7.9, 0.7.8, 0.7.7, …+ 1 more
- (no CPE)range: 0.7.9, 0.7.8, 0.7.7, …
- (no CPE)range: <0.7.9
Firestats/Genshi Template Enginellm-create
Range: <0.7.9

Patches

Vulnerability mechanics

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000