{"apiVersion":"1.0","identifier":"CVE-2026-54718","description":"Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in NotifyUsersWorkflowAction.EmailTemplate. When NotifyUsersWorkflowAction renders the field through the Silverstripe template engine SSTemplateParser, the payload can cause PHP evaluation and arbitrary code execution on the server; the regression coverage is in tests/php/WorkflowEngineTest.php. This issue is fixed in versions 6.4.5, 7.1.3, and 7.2.1.","publishedAt":"2026-08-27T20:17:49","lastModifiedAt":"2026-08-27T20:17:49","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-54718","cvssScore":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00724,"riskScore":0.77,"affectedProduct":"Silverstripe Advanced Workflow","affectedVersions":"<6.4.5, <7.1.3, <7.2.1","vulnerabilityType":"Library","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-54718","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-54718","en":"https://www.redsauce.net/en/cves/CVE-2026-54718","fr":"https://www.redsauce.net/fr/cves/CVE-2026-54718","pt":"https://www.redsauce.net/pt/cves/CVE-2026-54718","de":"https://www.redsauce.net/de/cves/CVE-2026-54718","sk":"https://www.redsauce.net/sk/cves/CVE-2026-54718","el":"https://www.redsauce.net/el/cves/CVE-2026-54718"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-54718"}}