CVE-2026-54718High· 7.2▾ TwilightSilverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side te…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.6 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 28.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.7%
Last analysed / modified upstream
0.7% → 1.0%
Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in NotifyUsersWorkflowAction.EmailTemplate. When NotifyUsersWorkflowAction renders the field through the Silverstripe template engine SSTemplateParser, the payload can cause PHP evaluation and arbitrary code execution on the server; the regression coverage is in tests/php/WorkflowEngineTest.php. This issue is fixed in versions 6.4.5, 7.1.3, and 7.2.1.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
symbiote/silverstripe-advancedworkflow < 6.4.5symbiote/silverstripe-advancedworkflow >= 7.0.0, < 7.1.3symbiote/silverstripe-advancedworkflow >= 7.2.0, < 7.2.1Patched in:
symbiote/silverstripe-advancedworkflow 6.4.5symbiote/silverstripe-advancedworkflow 7.1.3symbiote/silverstripe-advancedworkflow 7.2.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-84462High· 8.6Zammad is a web based open source helpdesk/customer support system
CVE-2026-88064High· 8.8Backstage is an open framework for building developer portals
CVE-2019-12694Medium· 6.7A vulnerability in the command line interface (CLI) of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker with administrative privileges to execute commands on the underlying operating system with …
CVE-2019-1697Medium· 6.8A vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote atta…
CVE-2019-1687High· 7.5A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to restart unexpect…
CVE-2018-15454High· 8.6A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an …