CVE-2026-21628: Templaza Astroid Framework

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.

Affected products

• Templaza Astroid Framework: from 2.0.0, up to and including 3.3.10

Published 2026-03-05. Last modified 2026-06-17.