CVE-2026-115938 | Craft CMS up to 4.18.8/5.11.1 Element Search renderObjectTemplate sandbox

October 23, 2026 Yanac

A vulnerability classified as critical has been found in Craft CMS up to 4.18.8/5.11.1. The affected element is the function View::renderObjectTemplate of the component Element Search. The manipulation leads to sandbox issue.

This vulnerability is uniquely identified as CVE-2026-115938. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More