{"uuid": "be938472-1dbd-4524-b685-a02b00a81886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72830", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117093749633609950", "content": "Grav API plugin &lt;1.0.13 has a CRITICAL flaw (CVE-2026-72830): scoped API keys can inject arbitrary commands into scheduler config, leading to remote code execution. Patch now! https://radar.offseq.com/threat/cve-2026-72830-improper-privilege-management-in-getgrav-grav-96262eb7a2b2ec89 #OffSeq #CVE202672830 #Grav #RCE #Infosec", "creation_timestamp": "2026-08-14T12:00:27.520443Z"}