CVE-2026-86732
Craft CMS before 5.10.12 Remote Code Execution via element-index
CVSS score
8.7
EPSS probability
%0.9
Risk score
0.1
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
10.0
CVE-2025-32432 Actively exploitedCode injection in Craftcms Craft Cms
Patch verified Public Exploits:13EPSS %100
8.7
8.8
CVE-2025-68454Vulnerability in Craftcms Craft Cms
Patch verified Public Exploits:1EPSS %1
8.7
CVE-2026-72778Craft CMS 5.0.0-RC1 before 5.10.6 Authenticated RCE via condition.config
Patch status unknownEPSS %1
7.2
CVE-2025-68455Vulnerability in Craftcms Craft Cms
Patch verified Public Exploits:1EPSS %1
8.7
CVE-2026-72781Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escape
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-86732"