{"vulnerability": "CVE-2026-82531", "sightings": [{"uuid": "3dc5cade-7cc3-4b49-a2f1-c6c7555cea5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mx7ijsphmu27", "content": "CVE-2026-82531: Smarty, the PHP template engine by smarty-php, has a code injection flaw in extends: template inheritance that allows arbitrary PHP execution. Fixed in versions 4.5.8 and 5.8.5. A proof-of-concept is published in the vendor advisory.", "creation_timestamp": "2026-10-06T13:03:22.631961Z"}, {"uuid": "688a67f0-2a3b-4f4e-910c-3f5cb68b6484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82531", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx7k2z3kzw2e", "content": "CRITICAL code injection in smarty-php Smarty (CVE-2026-82531) lets attackers run PHP code remotely. Update to 4.5.8/5.8.5 now to stay protected. https://radar.offseq.com/threat/cve-2026-82531-improper-control-of-generation-of-code-code-injection-in-smarty-php-smarty-eb57bcca29bb7350 #OffSeq #CVE ...", "creation_timestamp": "2026-10-06T13:30:54.605668Z"}, {"uuid": "bfb83f50-2308-4d59-acb4-212b0bbf526e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx7m6bml3d2l", "content": "\ud83d\udea8 CVE-2026-82531 \u2014 CVSS 9.2 CRITICAL\n\nSmarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocach...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82531\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T14:08:30.598464Z"}, {"uuid": "f9aeaf65-3bfa-419a-ba6d-48944b31c2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbi2gfzz52n", "content": "CVE-2026-82531 - smarty\nVersions of Smarty before 4.5.8 and 5.8.5 allow specially crafted templates to insert malicious code into the cached PHP file. This can let an attacker run any code on your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#smarty #debian #Debian12 #CVE #infosec", "creation_timestamp": "2026-10-07T08:00:05.918051Z"}]}