2026-03-17 · 2 min · BitNinja Team

Critical CVE-2026-32261 Alert: Protect Your Server Now

CVE-2026-32261 is a critical vulnerability affecting the Webhooks plugin for Craft CMS. It allows remote code execution (RCE) through server-side template injection (SSTI) on servers using versions 3.0.0 to 3.1.9. The absence of sandboxing in the rendering process enables auth...