CVE-2026-103537 | Thelia up to 2.6.1 Smarty Template checkTemplate special elements in template engine

October 12, 2026 Yanac

A vulnerability marked as critical has been reported in Thelia up to 2.6.1. This issue affects the function checkTemplate of the component Smarty Template Handler. This manipulation causes improper neutralization of special elements used in a template engine.

The identification of this vulnerability is CVE-2026-103537. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More