CVE-2026-69118

HIGH 8.8

Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when incidents are created, achieving remote code execution as the web server process.

CWE	CWE-1336 CWE-863
Vendor	cachethq
Product	cachet
Published	Aug 10, 2026

Stay Ahead of the Next One

Get instant alerts for cachethq cachet

Be the first to know when new high vulnerabilities affecting cachethq cachet are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

cachethq / cachet

0 ≤ 2.4.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/cachethq/cachet/issues/4621 vulncheck.com: https://www.vulncheck.com/advisories/cachet-authenticated-server-side-template-injection-rce

Credits

George Chen