CVE-2026-62992

Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 5.8.2 (and 4.5.7 on the 4.x line), Security::_checkDir() does not fully resolve symbolic links before validating that a requested path lies within a configured secure directory. An attacker able to place or reference a symlink within a directory Smarty treats as trusted (e.g., a template or config directory) could use it to point outside the intended secure directory, bypassing the containment check and reading arbitrary files accessible to the PHP process. This issue is fixed in versions 5.8.2 and 4.5.7.

• CWE-22
• CWE-61

• https://github.com/smarty-php/smarty/commit/99c048ce7a590c519b79fbd38ad0143a08183a1f
• https://github.com/smarty-php/smarty/commit/a1ccdb0518021a559b4066c37b76a42c86bbce90
• https://github.com/smarty-php/smarty/releases/tag/v4.5.7
• https://github.com/smarty-php/smarty/releases/tag/v5.8.2
• https://github.com/smarty-php/smarty/security/advisories/GHSA-f6wf-28g6-769x

Published

Aug 7, 2026

Last Modified

Sep 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-62982Glances is an open-source system cross-platform monitoring t…8.8
• CVE-2026-62985request-filtering-agent is an http(s).Agent implementation t…7.5
• CVE-2026-62986OpenEXR is the reference implementation and specification fo…4.3
• CVE-2026-62987Fabio is an HTTP(S) and TCP router for deploying application…5.8
• CVE-2026-62988Froxlor is open source server administration software. From …9
• CVE-2026-6299Use after free in Prerender in Google Chrome prior to 147.0.…8.8
• CVE-2026-62993Smarty is a template engine for PHP, facilitating the separa…6.9
• CVE-2026-62994CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14…3.7
• CVE-2026-62995joserfc is a Python library that provides an implementation …2.3
• CVE-2026-62996Smarty is a template engine for PHP, facilitating the separa…6.9
• CVE-2026-62997Kedro-Datasets provides data connectors for Kedro. From vers…7.7
• CVE-2026-62998REDAXO is a PHP-based content management system. Prior to 5.…4.3