CVE-2026-46633: Proving exploitability of Twig sandbox bypass
20 October 2026 at 20:08
I continued researching sandbox bypasses discovered in Twig by project Glasswing. This time, I focused on CVE-2026-46633, which still had no public exploits. This writeup documents my development of payloads for the CVE-2026-46633 and the corresponding SSTImap modules.
[link] [comments]