Vulnerabilities
VEX
CWE
ATT&CK
KEV Catalogs
All catalogs
Catalogue scorecard
GCVE
CISA
CIRCL
ENISA
Shadowserver
Previdian
Community
Sightings
Comments
Bundles
Organizations
Contributors
Statistics
Log in
About
Search term
Success
← All credits
Submersion AI - Security Research Team (SRT) (@SRTSubmersionAI)
1 vulnerability record and advisories credit this contributor.
CVE-2026-115189
A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic. The sandbox introduced to restrict user-uploaded theme templates (the fix for GHSA-9fx4-7cmj-47vg) does not fully enforce its restrictions, allowing a cra