{"uuid": "1f8143ed-1f64-48ad-811a-325802caaab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46640", "type": "seen", "source": "https://t.me/hacking_Attack/186840", "content": "CVE-2026-46640: Developing payloads for Twig sandbox bypass\nhttps://www.reddit.com/r/redteamsec/comments/1tyx0ss/cve202646640_developing_payloads_for_twig_sandbox/\n\nI recently learned about multiple sandbox bypasses discovered in Twig by project Glasswing. From the descriptions, only CVE-2026-46640 and CVE-2026-46633 seemed universally exploitable, so I decoded to research them. This writeup documents my development of payloads for the CVE-2026-46640 and the corresponding SSTImap module.    submitted by    /u/vladko312  (https://www.reddit.com/user/vladko312) \n [link] (https://gist.github.com/vladko312/39507beaa58eacf3b62e6a6e6cd69128)   [comments] (https://www.reddit.com/r/redteamsec/comments/1tyx0ss/cve202646640_developing_payloads_for_twig_sandbox/)", "creation_timestamp": "2026-09-01T20:00:08.132890Z"}