{"vulnerability": "cve-2026-7282", "sightings": [{"uuid": "2d24137c-efd6-4d8b-82c1-38887398ddc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7282", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkl3j2nq5g2r", "content": "", "creation_timestamp": "2026-04-28T17:14:44.383499Z"}, {"uuid": "7a486898-487c-4b53-a6b5-8362097ff157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72822", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt25xhi43t25", "content": "CVE-2026-72822 - grav\nA security issue in Grav's API before version 1.0.13 allows an attacker with a specific type of API key to disable two-factor authentication on other accounts. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-14T12:30:04.499379Z"}, {"uuid": "6d8d37a9-0923-42f9-a89d-68344bc9c379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72824", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt25xir7fo2p", "content": "CVE-2026-72824 - grav\nThe Grav API plugin in versions before 1.0.13 has a security flaw that allows a malicious user with a limited API key to execute server-side code on a Grav website. This could potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-14T12:30:05.716726Z"}, {"uuid": "21ee6738-358c-42fa-b5ff-03ebfc9ffd17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72826", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt26jdnhn423", "content": "CVE-2026-72826 - grav\nA vulnerability in Grav's API plugin allows an attacker to create an API key with unlimited access. This could be used to gain control over the system. Users should update to Grav 1.0.13\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-14T12:40:04.265977Z"}, {"uuid": "53ecafab-88a6-4b96-b59d-8048affdcce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72829", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt26jf2baq25", "content": "CVE-2026-72829 - grav\nA security issue in the Grav API plugin allows an attacker with a specific type of API key to gain full administrative access to a Grav site. This could be used to make unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-14T12:40:05.574542Z"}, {"uuid": "b189b6da-c1fd-414f-b670-98048ef8255b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72829", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt2bdhhhso2n", "content": "getgrav grav API plugin <1.0.13 has a CRITICAL privilege escalation flaw (CVE-2026-72829). Attackers with certain API keys can gain super admin access. Limit API key issuance & monitor for escalation. https://radar.offseq.com/threat/cve-2026-72829-improper-privilege-management-in-getgrav-grav-8d7...", "creation_timestamp": "2026-08-14T13:30:28.574152Z"}, {"uuid": "85bfaa45-0e9b-4c6c-a0f6-8f8cad681326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72829", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117094103522465305", "content": "CVE-2026-72829 (CRITICAL): getgrav grav API plugin <1.0.13 allows api.users.write-scoped keys from super accounts to escalate to full admin. Restrict API key use & monitor for privilege changes. Details: https://radar.offseq.com/threat/cve-2026-72829-improper-privilege-management-in-getgrav-grav-8d7c1bb7ce40a2ba #OffSeq #CVE202672829 #infosec #WebAppSec", "creation_timestamp": "2026-08-14T13:30:26.809655Z"}]}