CVE-2026-112773 | Craft CMS up to 5.10.x Twig Sandbox getNext injection

SecurityVulns
Yanac

A vulnerability has been found in Craft CMS up to 5.10.x and classified as critical. This affects the function getNext of the component Twig Sandbox. Performing a manipulation results in injection.

This vulnerability was named CVE-2026-112773. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More