High severityNVD Advisory· Published Aug 27, 2026

CVE-2026-79988

Description

The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading to authenticated RCE similar to previously disclosed vulnerabilities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Craftcms/CMSreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/craftcms/cms/releases/tag/5.10.7nvd
www.hckrt.com/hacktivity/HCKRT-8RQQ7Knvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000