CVE-2026-79988

EUVD-2026-67081
The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading to authenticated RCE similar to previously disclosed vulnerabilities.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 17.37%
Common Weakness Enumeration
References
https://github.com/craftcms/cms
https://github.com/craftcms/cms/releases/tag/5.10.7
https://www.hckrt.com/hacktivity/HCKRT-8RQQ7K