Main
Vulnerability Database
Exploits
ID:13096 - Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Mautic - CVE-2026-9558
ID:13096 - Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Mautic - CVE-2026-9558
Published: October 2, 2026
Vulnerability identifier: #VU133232
Vulnerability risk: Medium
CVE-ID: CVE-2026-9558
CWE-ID: CWE-1336
Exploitation vector: Remote access
Vulnerable software:
Mautic
Mautic
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to server-side template injection (SSTI) issue in Theme Templates. A remote user can execute arbitrary code on the system.
Remediation
Install updates from vendor's website.