r/netsec • • 1d ago

Rejected (Tool Post) CVE-2026-46633: Proving exploitability of Twig sandbox bypass

https://gist.github.com/vladko312/d61b950f168c791db4786b83dc7a81e6

I continued researching sandbox bypasses discovered in Twig by project Glasswing. This time, I focused on CVE-2026-46633, which still had no public exploits. This writeup documents my development of payloads for the CVE-2026-46633 and the corresponding SSTImap modules.

5 Upvotes

0 comments sorted by