CVE-2026-55794-craftcms-ssti

CVE-2026-55794 — Craft CMS signed-referrer SSTI A control-panel user who can edit an entry can place unsandboxed Twig in the HTTP Referer. The entry edit response signs that referral URL as a redirect value; saving the entry renders the signed value through renderObjectTemplate and executes Twig...