{"vulnerability": "cve-2026-72829", "sightings": [{"uuid": "53ecafab-88a6-4b96-b59d-8048affdcce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72829", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt26jf2baq25", "content": "CVE-2026-72829 - grav\nA security issue in the Grav API plugin allows an attacker with a specific type of API key to gain full administrative access to a Grav site. This could be used to make unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-14T12:40:05.574542Z"}, {"uuid": "b189b6da-c1fd-414f-b670-98048ef8255b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72829", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt2bdhhhso2n", "content": "getgrav grav API plugin <1.0.13 has a CRITICAL privilege escalation flaw (CVE-2026-72829). Attackers with certain API keys can gain super admin access. Limit API key issuance & monitor for escalation. https://radar.offseq.com/threat/cve-2026-72829-improper-privilege-management-in-getgrav-grav-8d7...", "creation_timestamp": "2026-08-14T13:30:28.574152Z"}, {"uuid": "85bfaa45-0e9b-4c6c-a0f6-8f8cad681326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72829", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117094103522465305", "content": "CVE-2026-72829 (CRITICAL): getgrav grav API plugin <1.0.13 allows api.users.write-scoped keys from super accounts to escalate to full admin. Restrict API key use & monitor for privilege changes. Details: https://radar.offseq.com/threat/cve-2026-72829-improper-privilege-management-in-getgrav-grav-8d7c1bb7ce40a2ba #OffSeq #CVE202672829 #infosec #WebAppSec", "creation_timestamp": "2026-08-14T13:30:26.809655Z"}]}