Skip to main content
PPN WorldPPN World
Subscribe

Shared from the live wire

Centre canadien pour la cybersécurité — Alertes et avis·CA·

Bulletin de sécurité Craft CMS (AV26-1067)

Numéro de série : AV26-1067 Date : 19 octobre 2026 En date du 19 octobre 2026, Craft CMS est touché par des vulnérabilités dans le produit suivant : Craft CMS Versions antérieures à la version 4.18.8 Versions antérieures à la version 5.11.0 Le Centre pour la cybersécurité encourage les utilisateurs et les administrateurs à consulter les liens fournis et à installer les mises à jour nécessaires, dès qu'elles sont disponibles. Authenticated RCE via Twig group filter array-callable (en anglais seulement) Twig sandbox allowlist bypass discloses sensitive values (en anglais seulement) Authenticated RCE: Twig sandbox "on/as" behavior injection via "Asset::getMimeType" transform (en anglais seulement) Authenticated RCE: Twig sandbox "on/as" behavior injection via uncleansed "getNext/getPrev/getOwners" criteria (en anglais seulement) Authenticated admin RCE via Content Block field-layout JSON-string cleanse (en anglais seulement) Craft CMS Security Advisories (en anglais seulement)

Subscribe →Read at the source ↗

Cancel anytime · CA$99/month

Crossing the wire right now

More from Centre canadien pour la cybersécurité — Alertes et avis

The rest of this wire is for subscribers

Every release from this source, the moment it crosses — plus 80+ other newswires, saved searches and instant alerts.

Subscribe →Sign in

Cancel anytime · CA$99/month

This is PPN World

You just read one release. Subscribers see them all — the second they land.

Governments, regulators, central banks, companies and the newswires — in one live screen, searchable, filterable, and watching what you track.

feeds
1,400+
newswires
80+
countries
190+
languages
25+
The PPN World cockpit's live feed, showing government sources in English: the newest official releases, each with its date, time, sector, country and source.

  • 01

    Live, not a digest

    Every release the moment it crosses — no daily email, no 24-hour lag.

  • 02

    Alerts on what you track

    Save a search and know the instant a matching release lands.

  • 03

    The whole archive

    Search back through every release by country, sector, source and language.

Watch

PPN World in 30 seconds

Read the film's text
  1. Embargoed until 07:00:00. Every story starts with an official source.
  2. A company. A government. A regulator. A newswire.
  3. By the time it's news, everyone has it.
  4. Unless you saw it first.
  5. PPN World — the terminal for press releases.
  6. Every press release. One live feed. Deduplicated, translated, streaming the second it's published.
  7. Official information, straight from the source. 1,400+ feeds, 80+ newswires, 190+ countries.
  8. Know what breaks tomorrow. Earnings, elections and official decisions, 14 days ahead.
  9. Alerts. AI briefs. One cockpit. Built for journalists, PR teams and content creators.
  10. Read the wire before it becomes news. ppnworld.com

1,400+ feeds — live on PPN World right now

Don't find out last.

Releases like this one land on PPN World as they are published, from 190+ countries. Read the next one first.

Subscribe →

Cancel anytime · CA$99/month

Your announcement next? Distribute your press release to the global wires with PPN Source — and track its pickup live here.

PPN Source →
Shared via PPN World — real-time press release intelligence.