CVE-2026-115938

Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed column filter delegates property lookup to Yii ArrayHelper, outside Twig’s SecurityPolicy. Repeated single-segment...

PT-2026-122243

Name of the Vulnerable Software and Affected Versions Craft CMS affected versions not specified Description Authenticated control panel users can submit an element-search condition where the element selector is evaluated as a sandboxed Twig object template. The column filter delegates property...