CVE-2026-62993

A flaw was found in Smarty, a PHP template engine. The fetch function, when a security policy was active, only validated the initial remote URL against a trusteduri allowlist. However, PHP's filegetcontents function, used for resources including HTTPS URLs, followed HTTP redirects by default. Thi...

Linux Distros Unpatched Vulnerability : CVE-2026-62993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the...

Smarty: SSRF via redirect bypass of trusted_uri using {fetch}

When a Security policy is active, fetch validates the requested remote URL against the trusteduri allowlist via Security::isTrustedUri. For non-http:// schemes e.g. https:// the resource was then read with filegetcontents, which follows HTTP redirects by default. Because isTrustedUri only validat...

EUVD-2026-68814

Smarty: SSRF via redirect bypass of trusteduri using fetch...

GHSA-CQ55-C7WV-PXMQ Smarty: SSRF via redirect bypass of trusted_uri using {fetch}

When a Security policy is active, fetch validates the requested remote URL against the trusteduri allowlist via Security::isTrustedUri. For non-http:// schemes e.g. https:// the resource was then read with filegetcontents, which follows HTTP redirects by default. Because isTrustedUri only validat...

DEBIAN-CVE-2026-62993

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's fetch handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri to...

CVE-2026-62993

Smarty is a PHP template engine. In versions prior to 4.5.7 and 5.8.2 , the {fetch} tag (handled in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php) validated only the initial remote URL against the trusted_uri allowlist via Security::isTrustedUri(). Because PHP's file_get_conte...

CVE-2026-62993 Smarty: SSRF via redirect bypass of trusted_uri using {fetch}

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's fetch handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri to...

CVE-2026-62993 Smarty: SSRF via redirect bypass of trusted_uri using {fetch}

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's fetch handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri to...

CVE-2026-62993

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's fetch handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri to...

CVE-2026-62993 Smarty: SSRF via redirect bypass of trusted_uri using {fetch}

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's fetch handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri to...

CVE-2026-62993: Server-Side Request Forgery (SSRF)

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's fetch handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri to...