{"uuid": "2a39a0f8-b2a4-4aea-beee-7b5392482452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46633", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/186840", "content": "CVE-2026-46640: Developing payloads for Twig sandbox bypass\nhttps://www.reddit.com/r/redteamsec/comments/1tyx0ss/cve202646640_developing_payloads_for_twig_sandbox/\n\nI recently learned about multiple sandbox bypasses discovered in Twig by project Glasswing. From the descriptions, only CVE-2026-46640 and CVE-2026-46633 seemed universally exploitable, so I decoded to research them. This writeup documents my development of payloads for the CVE-2026-46640 and the corresponding SSTImap module.    submitted by    /u/vladko312  (https://www.reddit.com/user/vladko312) \n [link] (https://gist.github.com/vladko312/39507beaa58eacf3b62e6a6e6cd69128)   [comments] (https://www.reddit.com/r/redteamsec/comments/1tyx0ss/cve202646640_developing_payloads_for_twig_sandbox/)", "creation_timestamp": "2026-09-02T01:00:20.497054Z"}