CVE-2026-69118
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering. Authenticated users can create malicious incident templates with Blade directives or Twig filters that execute system commands, achieving remote code execution as the web server process.
Risk Assessment
An authenticated attacker can execute arbitrary PHP code on the server, potentially leading to full control of the application and server.
Recommendation
Update Cachet to a patched version or apply appropriate mitigations if not available.
Original NVD description (English source)
Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when incidents are created, achieving remote code execution as the web server process.