Craft CMS and Commerce-mollie need updates, Cyber Centre says
CMS before 4.18.9 and 5.11.2, and Commerce-mollie before 4.4.3, are affected as of October 23.
36
Vendor
Craft CMS
- Mentions · 7d1
- Mentions · 30d2
- All mentions2
- First seenOct 20, 2026
- Last mentioned4d ago
Timeline
2 articles · newest firstCraft CMS before 4.18.8 and 5.11.0 has authenticated RCE flaws
Canada's Cyber Centre lists Twig sandbox bypasses and admin remote code execution and urges administrators to apply updates.
58
Appears with
- Canadian Centre for Cyber Securityorganization · 2
- Commerce-mollieproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.