{"uuid": "8bca61f5-f09b-40c6-8b5e-0468b16acad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46636", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117256028412859964", "content": "CVE-2026-46636: Twig <3.27.0 sandbox bypass\u2014subclasses of Twig\\Markup expose all public methods, allowing arbitrary code execution. CVSS N/A, fix available. Update immediately to 3.27.0+. https://www.valtersit.com/cve/CVE-2026-46636/ #CVE #infosec #PHP", "creation_timestamp": "2026-09-12T03:50:05.281757Z"}