CVE-2026-112770 | Craft CMS cms Twig group filter FileHelper::writeToFile code injection

October 19, 2026 Yanac

A vulnerability described as problematic has been identified in Craft CMS cms. This affects the function FileHelper::writeToFile of the component Twig group filter. Executing a manipulation can lead to code injection.

This vulnerability appears as CVE-2026-112770. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More