Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur. From version 3.0.0 to before version 3.2.0, the Webhooks plugin renders user-supplied template content through Twig’s renderString() function without sandbox protection. This allows an authenticated user with access to the Craft control panel and permissions to access the Webhooks plugin to inject Twig template code that calls arbitrary PHP functions. This is possible even if allowAdminChanges is set to false. This issue has been patched in version 3.2.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-32261 Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur. From version 3.0.0 t… https://www.cve.org/CVERecord?id=CVE-2026-32261
Post summary
The text briefly notes that Craft CMS Webhooks plugin can send GET/POST requests, but offers no exploit, patch, or detailed technical info.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-32261 - RCE via SSTI for users with permissions to access the Craft CMS Webhooks plugin Intel Report: https://ift.tt/GfMkezu
Post summary
The post alerts to CVE-2026-32261, a remote code execution vulnerability via SSTI in the Craft CMS Webhooks plugin, but offers no evidence of PoC, exploitation, patch, or false positive claims.