{"vulnerability": "CVE-2026-100671", "sightings": [{"uuid": "3c5cb309-6dba-4318-8bea-e6c02c2a0665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100671", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhq7zktlt2m", "content": "\ud83d\udfe0 CVE-2026-100671 - High (8)\n\nGrav is a flat-file CMS. In versions 2.0.19 through 2.0.24 \u2014 and in 2.0.0 through 2.0.18 and 1....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100671/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:17:11.594478Z"}, {"uuid": "b2ebfd42-829e-4c30-ba6b-919d19e7deea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100671", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwi2h4dfml26", "content": "CVE-2026-100671 - grav\nPages edited by a low\u2011privilege user can capture the browser cookie that identifies an administrator\u2019s login. The cookie is saved in the site\u2019s cache and later shown to anyone who views\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-09-27T05:20:06.076360Z"}]}