High severityNVD Advisory· Published Aug 18, 2026· Updated Aug 18, 2026

CVE-2026-71880

Description

Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gbif/iptllm-fuzzy
Range: <3.3.4
Gbif/Integrated Publishing Toolkitllm-fuzzy
Range: <3.3.4

Patches

Vulnerability mechanics

References

github.com/gbif/ipt/issues/3118nvd
github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0016.mdnvd
www.gbif.org/iptnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000