S
Vendor security profile
smarty-php
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical1
CISA KEV0
Public exploit2
Patch rate%75
Avg. CVSS7.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
0
1
CVE KEV
CVE severity distribution
4toplam CVE
Critical1 (25%)
Medium3 (75%)
Patch and exploitation view
%75
Verified patch
%0
CISA KEV
%50
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
9.2
CVE-2026-82531
Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache
S
Patch verifiedEPSS %1
6.9
CVE-2026-62993
Smarty: SSRF via redirect bypass of trusted_uri using {fetch}
S
Patch status unknownEPSS %1
6.9
CVE-2026-62996
Smarty Security stream restriction bypass through stream: resource
S
Patch verifiedEPSS %1
6.9
CVE-2026-62992
Smarty: Symlink path traversal out of trusted directories
S
Patch verifiedEPSS %1