Post #124105 5 Oct 13, 2026, 14:43 UTC CVE Alert: CVE-2026-109305 - craftcms - cms - https://www.redpacketsecurity.com/cve-alert-cve-2026-109305-craftcms-cms/ RedPacket Security CVE Alert: CVE-2026-109305 - craftcms - cms - RedPacket Security Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some"