CVE-2026-112771 | Craft CMS up to 4.18.7/5.10.x Twig Sandbox ArrayHelper::getValue sandbox

October 19, 2026 Yanac

A vulnerability was found in Craft CMS up to 4.18.7/5.10.x. It has been classified as problematic. This issue affects the function ArrayHelper::getValue of the component Twig Sandbox. The manipulation leads to sandbox issue.

This vulnerability is referenced as CVE-2026-112771. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More