CVE-2026-28695

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 27, 2026

Last Seen

September 27, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in Craft CMS Exploited72.6

A newly discovered exploit allows authenticated blind remote code execution (RCE) in Craft CMS versions up to 5.9.8, bypassing the CVE-2026-28695 fix. The vulnerability arises from improper neutralization of special elements in a template engine, specifically through the `create()` method, which was...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerability in Craft CMS Exploited

4h ago·2 sources

Related Entities

Zero-day Exploit Remote Code Execution Cwe-502 - Deserialization Of Untrusted Data T1059.004 - Unix Shell Craft CMS PHP Socat

CVE-2026-28695

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical RCE Vulnerability in Craft CMS Exploited

Related Articles (2)

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Craftcms Craft_Cms

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Craftcms Craft_Cms

Related Entities