Skip to content
Craft Cms 4.0.0 Before 4.18.7 And 5.0.0 Before 5.10.14 Rce Via Actioncacheupdates Behavior Injection

Craft Cms 4.0.0 Before 4.18.7 And 5.0.0 Before 5.10.14 Rce Via Actioncacheupdates Behavior Injection

www.vulncheck.com • October 13, 2026

Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injection

cms >= 4.0.0, = 4.0.0, = 5.0.0, = 5.0.0, < 5.10.14

CWE-94 Improper Control of Generation of Code ('Code Injection')

GitHub Security Advisory (GHSA-5m2g-hhqr-84pc)

VulnCheck Advisory: Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injection

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

Extracted Entities

CWE Weaknesses (1)

Platforms (1)