CVE-2026-46636 | twigphp Twig up to 3.26.x SecurityPolicy checkMethodAllowed privileges management

September 4, 2026 Yanac

A vulnerability was found in twigphp Twig up to 3.26.x. It has been declared as critical. This impacts the function SecurityPolicy::checkMethodAllowed of the component SecurityPolicy. Such manipulation leads to improper privilege management.

This vulnerability is listed as CVE-2026-46636. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More