I continued researching sandbox bypasses discovered in Twig by project Glasswing. This time, I focused on CVE-2026-46633, which still had no public exploits. This writeup documents my development of payloads for the CVE-2026-46633 and the corresponding SSTImap modules. submitted by /u/vladko312 [link] [comments]
π Search
CVE-2026-46633: Proving exploitability of Twig sandbox bypasshttps://www.reddit.com/r/netsec/comments/1xb2qvz/cve202646633_proving_exploitability_of_twig
Employees warned TikTok about child exploitation, court documents showhttps://www.engadget.com/2292225/employees-warned-tiktok-about-child-exploitation-court-documents-show
The company is facing hundreds of lawsuits over its record on safety.

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Executionhttps://thehackernews.com/2026/10/critical-fortisiem-flaw-gets-public.html
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially