r/netsec • u/vladko312 • 1d ago
Rejected (Tool Post) CVE-2026-46633: Proving exploitability of Twig sandbox bypass
https://gist.github.com/vladko312/d61b950f168c791db4786b83dc7a81e6I continued researching sandbox bypasses discovered in Twig by project Glasswing. This time, I focused on CVE-2026-46633, which still had no public exploits. This writeup documents my development of payloads for the CVE-2026-46633 and the corresponding SSTImap modules.
5
Upvotes