PT-2026-68768

CVE-2026-64663

·

Published

2026-08-06

·

Updated

2026-08-07

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Name of the Vulnerable Software and Affected Versions Statamic versions prior to 5.74.1 Statamic versions prior to 6.24.0
Description Manipulating user-supplied input incorporated into Antlers templates could result in the loss of content and assets. This occurs on sites where templates pass untrusted input into affected areas and does not require authentication.
Recommendations Update to version 5.74.1. Update to version 6.24.0.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\'Unsafe Reflection\')
Related identifiers
CVE-2026-64663
GHSA-J2VP-F2PV-5RJ4
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com