CVE-2026-69118CWE-1336CWE-863broken-access-control

CVE-2026-69118

High · published August 11, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when incidents are created, achieving remote code execution as the web server process.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00805 · 56.3th percentile
Weaknesses
CWE-1336 · Improper Neutralization of Special Elements Used in a Template Engine; CWE-863 · Incorrect Authorization
Published
2026-08-11T00:17Z
References (2)
https://github.com/cachethq/cachet/issues/4621 · [email protected]https://www.vulncheck.com/advisories/cachet-authenticated-server-side-template-injection-rce · [email protected]
EPSS history
Timeline
  • 10 AUG 19:42Z
    Cachet 2.4.1 Authenticated Server-Side Template Injection RCE
    cvelistv5