GHSA-2p6p-9rc9-62j9

Exploit Intelligence

• A POC lab environment for CVE-2024-56145 CraftCMS RCE. (github-poc-repo)
• A POC lab environment for CVE-2024-56145 CraftCMS RCE. (github-poc-repo)
• A POC lab environment for CVE-2024-56145 CraftCMS RCE. (github-poc-repo)
• A POC lab environment for CVE-2024-56145 CraftCMS RCE. (github-poc)
• A POC lab environment for CVE-2024-56145 CraftCMS RCE. (github-poc)
• A POC lab environment for CVE-2024-56145 CraftCMS RCE. (github-poc)
• CVE-2024-56145 SSTI to RCE - twig templates (github-poc)
• CVE-2024-56145 SSTI to RCE - twig templates (github-poc)
• CVE-2024-56145 SSTI to RCE - twig templates (github-poc)
• Unauthenticated RCE on CraftCMS when PHP `register_argc_argv` config setting is enabled (github-poc)

…and 23 more exploits

Timeline

• CVE Published
• Apr 9, 2026 Security Advisory