Ssti

Invision Community Theme Editor Template Injection Unauthenticated RCE (CVE-2025-47916) new EPSS 84%CVE-2025-47916webCRITICAL 10Patched2026-07-06Crafty Controller Webhook Jinja2 Server-Side Template Injection RCE (CVE-2025-14700) newCVE-2025-14700webCRITICAL 9.9Unverified2026-07-06Thymeleaf SpEL Injection Remote Code Execution (CVE-2026-41901) newCVE-2026-41901webCRITICALPatched2026-07-05Shopware Twig Rendered-View Code Injection Regression (CVE-2026-23498) newCVE-2026-23498webHIGHPatched2026-07-05Jinjava Server-Side Template Injection to RCE via Jackson ObjectMapper (CVE-2026-25526) newCVE-2026-25526webCRITICALPatched2026-07-05Contact Form by Supsystic <= 1.7.36 Unauthenticated SSTI to RCE (CVE-2026-4257) new EPSS 41%CVE-2026-4257webCRITICALUnverified2026-07-05Apache Solr Velocity Template Injection RCE (CVE-2026-44825) newCVE-2026-44825webCRITICAL 9.8Patched2026-07-05Confluence SSTI RCE - CVE-2023-22527 new KEV RW EPSS 100%CVE-2023-22527webCRITICAL 10Patched2026-05-17