CVE-2026-79774

Katalog CVE

CVSS 8.4 · High EPSS 0,81%

Kerentanan Protection Mechanism Failure. Skor CVSS 3.1 8.4 (High) menurut vulncheck.com.

Deskripsi (NVD)

Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\\Twig\\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit method forwarding through Eloquent models and query builders using methods like saveQuietly(), deleteQuietly(), increment(), decrement(), and newQuery() to read and modify arbitrary database records, execute arbitrary SQL, and achieve remote code execution by injecting PHP into template code sections.

Rincian

Terbit di NVD

25 Agustus 2026

Terakhir diubah

8 Oktober 2026

Status NVD

Deferred

CVSS 3.1

8.4 (High), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-693: Protection Mechanism Failure

EPSS (30 hari)

0,81% peluang dieksploitasi; lebih tinggi dari 55,7% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/wintercms/winter/commit/725bbcda232466f7f71381c271c6916573d576e6
• https://github.com/wintercms/winter/security/advisories/GHSA-8cfw-pcwh-v63w
• https://www.vulncheck.com/advisories/winter-cms-before-twig-sandbox-escape-via-securitypolicy