VulnSocial

CVE-2026-45618Patch

LOW

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

Back to dashboard
2.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 6 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 2 signals
  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 4 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked at 3 mentions on most recent observed day (2026-08-12)
  • 6 total mentions across 3 days

Deep dive

Activity timeline6 mentions / 3d
01223Mentions · 2026-05-27: 1Mentions · 2026-05-28: 2Mentions · 2026-08-12: 3PoC Mentioned / Linked · 2026-05-28: 1PoC Mentioned / Linked · 2026-08-12: 1Patch / Workaround · 2026-05-27: 1Patch / Workaround · 2026-05-28: 2Technical Details · 2026-05-27: 1Technical Details · 2026-05-28: 2Technical Details · 2026-08-12: 105-2705-2808-12
Signal classification3 categories
Patch
350.0%
General
233.3%
Disclosure
116.7%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-05-271
Patch1
2026-05-282
Patch2
2026-08-123
Disclosure1General2
Full discourse6 posts
  • CCB Alert@CCBalert
    Patch

    Warning: Critical code injection vulnerability in #LiquidJS. #CVE-2026-45618 CVSS: 10.0. A remote attacker could exploit this vulnerability to achieve remote code execution #RCE! Read our advisory https://ccb.belgium.be/advisories/warning-critical-remote-code-execution-affects-liquidjs-patch-immediately #Patch #Patch #Patch

    Post summary

    The advisory discloses a critical code injection flaw in LiquidJS (CVSS 10.0), enabling remote code execution, and urges users to apply the available patch immediately.

    02000266
    7.2K followersView on X
  • ExploitGrid@exploitgrid
    Disclosure

    [CVE] CVE-2026-45618 [HIGH PRIORITY] #LiquidJS is Vulnerable to Remote Code Execution 🔗 https://exploitgrid.net/cve/CVE-2026-45618

    Post summary

    LiquidJS is flagged as having a high‑priority remote code execution vulnerability (CVE‑2026‑45618), with a link directing to additional exploit details on ExploitGrid.

    1000026
    30 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-17061 CVE-2026-27302 CVE-2026-45618 CVE-2026-48056 CVE-2026-48362 ..🧵👇

    Post summary

    The post lists several CVEs without providing further details, PoCs, exploitation evidence, or mitigation information.

    1000052
    30 followersView on X
  • Veriti Spottr@veritispottr
    General

    CRITICAL Alert (CVE-2026-45618): LiquidJS vulnerability Read more: https://threat.veritispottr.com #CyberSecurity #ThreatIntel #InfoSec

    Post summary

    The post only announces a CVE for LiquidJS and offers a link, without any specific technical, exploit, or patch information.

    0001039
    223 followersView on X
  • Upwind Security MDR@UpwindMDR
    Patch

    🚨 Critical - LiquidJS Remote Code Execution (CVE-2026-45618) A critical vulnerability in liquidjs allows attackers to achieve arbitrary code execution through crafted templates by abusing filter evaluation, prototype manipulation, and access to the Function constructor. Affected versions: • liquidjs <10.26.0 Impact: • unauthenticated RCE • server compromise • arbitrary command execution 👉 Upgrade immediately to v10.26.0

    Post summary

    The post announces a critical RCE vulnerability in LiquidJS and urges users to upgrade to v10.26.0 for mitigation.

    00010111
    196 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    CVE-2026-45618: Critical (CVSS 10) RCE in npm/liquidjs. Crafted Liquid templates allow arbitrary code execution. No auth, no interaction needed. Update to v10.26.0 now. #nodejs #security https://secalerts.co/vulnerability/CVE-2026-45618 https://t.co/ChzJ9cV099

    Post summary

    The tweet announces a critical CVE-2026-45618 causing remote code execution in npm/liquidjs and advises users to upgrade to v10.26.0 for remediation.

    0000094
    826 followersView on X

Explore more

Back to dashboard