Skip to content
Vulnerability intelligence

CVE-2026-112770: Craft CMS remote code execution

CVE-2026-112770 turns a control panel login into code execution in Craft versions before 4.18.8 and 5.11.0.

2026
What WebPulse reported · 1 analysis
Craft CMS flaw lets a control panel user run code on the web server

CVE-2026-112770 turns a control panel login into code execution in Craft versions before 4.18.8 and 5.11.0.

October 22, 2026
View CVE-2026-112770 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795