CVE-2026-62996: falha de média gravidade em smarty-php smarty
Smarty Security stream restriction bypass through stream: resource
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.5%
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. From 5.0.0 until 5.8.4, Smarty's stream: resource-name handling does not adequately restrict which PHP stream wrappers and filter chains can be referenced from a template, allowing a php://filter-wrapped resource name to be used to read the contents of arbitrary local files accessible to the PHP process. An attacker able to author or influence a template's resource reference could exploit this to disclose sensitive file contents outside the intended template/config scope. This issue is fixed in version 5.8.4.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
smarty-php · smartyCVEs relacionadas — smarty-php smarty
No mesmo produto, das mais perigosas para as menos.
CVE-2022-29221HIGHPHP Code Injection by malicious block or filename in SmartyEPSS 4.9%CVE-2021-21408HIGHAccess to restricted PHP code by dynamic static class access in smartyEPSS 2.1%CVE-2021-29454HIGHSandbox Escape by math function in smartyEPSS 1.9%CVE-2023-28447HIGHCross site scripting vulnerability in Javascript escaping in smarty/smartyEPSS 1.0%CVE-2026-82531CRITICALSmarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance CacheEPSS 0.8%CVE-2026-62993MEDIUMSmarty: SSRF via redirect bypass of trusted_uri using {fetch}EPSS 0.6%