CVE-2026-59191 | CakePHP TwigView up to 1.3.2/2.1.1 FileLoader FileLoader::findTemplate path traversal

A vulnerability labeled as problematic has been found in CakePHP TwigView up to 1.3.2/2.1.1. The affected element is the function FileLoader::findTemplate of the component FileLoader. The manipulation results in path traversal.

This vulnerability is identified as CVE-2026-59191. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More