Twig — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical SSTI Vulnerability in FOSSBilling Exposes Databases to RCE Attacks

  A critical server-side template injection (SSTI) vulnerability in FOSSBilling, tracked as CVE-2026-28496, was disclosed on June 23, 2026. This flaw affects all versions up to 0.7.2 and allows attackers to exploit unsafe…

  2 articles · Updated June 26, 2026
• Critical RCE Vulnerability in Craft CMS (CVE-2026-31857) Exposed

  A Remote Code Execution vulnerability (CVE-2026-31857) has been identified in Craft CMS versions prior to 5.9.9 and 4.17.4. The flaw exists in the BaseElementSelectConditionRule::getElementIds() method, which improperly…

  2 articles · Updated April 12, 2026
• Severe Twig Vulnerability Allows Arbitrary Code Execution in Ubuntu 26.04 LTS

  A critical vulnerability in the Twig template engine affects Ubuntu 26.04 LTS and its derivatives. Discovered on June 8, 2026, the flaw allows an authenticated user to execute arbitrary code by sending specially crafted…

  2 articles · Updated June 9, 2026
• Craft CMS Vulnerability CVE-2026-55794 Allows Authenticated RCE via HTTP Referrer

  Craft CMS versions 5.9.0 and above prior to 5.10.0 are vulnerable to authenticated remote code execution (RCE) due to a flaw in how the control panel processes the HTTP Referrer header. Users with edit permissions can…

  2 articles · Updated July 7, 2026

Recent Intelligence Reports

• nvd.nist.gov /vuln/detail/CVE-2026-55794 — nvd.nist.gov · July 7, 2026
• FOSSBilling Flaw Lets Admin Attackers Abuse DI Container for SQL Access and RCE — Gbhackers · June 26, 2026
• Ubuntu 26.04 LTS php-twig Severe Arbitrary Code Execution Flaw USN-8408 — Linuxsecurity · June 9, 2026
• CVE-2026-31857 — nvd.nist.gov · April 12, 2026

Related Entities