CVE-2026-82531
Last modified
CVE-2026-82531 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never restored during extends:/multi-component template inheritance, leaving it null. Attackers can supply assigned data containing a forged SmartyNocache marker that is copied verbatim into the regenerated PHP cache file, executing arbitrary PHP on include for remote code execution..
Description
Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never restored during extends:/multi-component template inheritance, leaving it null. Attackers can supply assigned data containing a forged SmartyNocache marker that is copied verbatim into the regenerated PHP cache file, executing arbitrary PHP on include for remote code execution.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| smarty-php | smarty | < 4.5.8; >= 5.0.0, < 5.8.5 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-82531?
How severe is CVE-2026-82531?
How do I fix CVE-2026-82531?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-82524UnoPim before 2.1.5 contains an authenticated file upload vu…7.2
- CVE-2026-82525Exterro FTK Imager before 8.3 contains an XML external entit…5.5
- CVE-2026-82526R2R through 3.6.6 contains a stacked SQL injection vulnerabi…9.8
- CVE-2026-82527R2R through 3.6.6 contains a SQL injection vulnerability tha…7.5
- CVE-2026-8253A vulnerability was identified in Devs Palace ERP Online up …2.4
- CVE-2026-82530IP2Location Country Blocker plugin for WordPress before 2.45…5.3
- CVE-2026-82533DeepSeek Harness before 0.1.2-alpha.1 contains an authentica…9.6
- CVE-2026-82535Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross…6.1
- CVE-2026-82536Roo-Code through 3.54.0 contains an auto-approve bypass vuln…8.8
- CVE-2026-82537Roo-Code through 3.54.0 contains an auto-approve bypass vuln…8.8
- CVE-2026-82538ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL i…8.8
- CVE-2026-82539A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630…9.1
Are you affected by CVE-2026-82531?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST