{"vulnerability": "cve-2026-7583", "sightings": [{"uuid": "004e1bff-0ef8-4692-ab5e-a89f32db84e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75832", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mteec6zzp323", "content": "CVE-2026-75832 - grav\nA security flaw in the Grav API plugin allows unauthorized users to upload files and view other users' files. This can happen if an attacker has an API key with limited permissions. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-18T13:50:04.383447Z"}, {"uuid": "2af79493-e00e-4315-b6ff-2182d8ae20eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75835", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mteecacyal23", "content": "CVE-2026-75835 - grav\nGrav's API plugin, used for website administration, has a security flaw that allows an attacker with an API key to access sensitive information they shouldn't be able to see. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-18T13:50:05.895297Z"}, {"uuid": "f5a6b890-4bbf-4423-88c9-ae7b7c672718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75832", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefbrptnq2y", "content": "\ud83d\udea8 CVE-2026-75832 \u2014 CVSS 9.3 CRITICAL\n\nThe Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0) before version 1.0.14 (fixed in 1.0.15...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75832\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:07:44.287420Z"}, {"uuid": "bc47c1bd-2ac2-417f-8d24-a7c4ab316fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75835", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefc6ei4q2c", "content": "\ud83d\udea8 CVE-2026-75835 \u2014 CVSS 9.3 CRITICAL\n\nGrav API plugin (getgrav/grav-plugin-api) before 1.0.14 contains a missing authorization vulnerability in u...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75835\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:07:57.295046Z"}, {"uuid": "7a20f7ad-250d-404c-9eef-96f61646d2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75837", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefck2d542b", "content": "\ud83d\udea8 CVE-2026-75837 \u2014 CVSS 9.3 CRITICAL\n\nGrav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@:...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75837\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:08:10.096449Z"}, {"uuid": "b2bece30-7e44-42e4-82f7-4e885daa03d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75837", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mte6petjve2t", "content": "CVE-2026-75837 - grav\nGrav users with lower permissions can gain super-admin rights by exploiting a weakness in the group access field. This allows them to access sensitive features. Update to Grav 2.0.14 or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-18T12:10:07.187405Z"}, {"uuid": "7be9d4f7-5884-4477-9964-82223448f99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75831", "type": "seen", "source": "https://gist.github.com/alon710/0c813f94f8f4231594aa209e75f9f7b9", "content": "# CVE-2026-75831: CVE-2026-75831: Stored Cross-Site Scripting in Grav CMS Audio/Video Media Rendering\n\n> **CVSS Score:** 7.6\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75831\n\n## Summary\nImproper neutralization of input during web page generation in Grav CMS allows authenticated users with page modification privileges to execute stored Cross-Site Scripting (XSS) attacks. The flaw exists in AudioMediaTrait and VideoMediaTrait where media source URLs are concatenated directly into HTML templates without proper escaping.\n\n## TL;DR\nA stored Cross-Site Scripting vulnerability in Grav CMS versions prior to 2.0.15 allows authenticated editors to insert arbitrary JavaScript via malicious audio/video file paths, which executes in the context of any user (including administrators) viewing the page.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 7.6 (High)\n- **EPSS Score**: 0.00313 (0.31%)\n- **Impact**: Stored Cross-Site Scripting (XSS)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Grav CMS\n- **Grav**: < 2.0.15 (Fixed in: `2.0.15`)\n\n## Mitigation\n\n- Upgrade Grav CMS core to version 2.0.15 or later.\n- Deploy a robust Content Security Policy (CSP) to block unauthenticated inline scripts.\n- Utilize WAF rules to detect and drop payloads containing attribute breakout characters in markdown submissions.\n\n**Remediation Steps:**\n1. Navigate to the Grav Admin Panel.\n2. Select the update notification or run 'bin/gpm self-upgrade' via the command line interface.\n3. Verify that 'AudioMediaTrait.php' and 'VideoMediaTrait.php' contain the htmlspecialchars wrapping for the $location variable.\n4. Clear the Grav cache by executing 'bin/grav clear-cache'.\n\n## References\n\n- [GHSA-6qw9-4vv5-jr97: Stored XSS in Grav CMS Audio/Video Media Rendering](https://github.com/getgrav/grav/security/advisories/GHSA-6qw9-4vv5-jr97)\n- [Grav Fix Commit](https://github.com/getgrav/grav/commit/d5f89d95d94cc155bc3be998ee85527a7be073dd)\n- [VulnCheck Advisory for CVE-2026-75831](https://www.vulncheck.com/advisories/grav-before-stored-xss-via-audio-video-source-url)\n- [NVD - CVE-2026-75831](https://nvd.nist.gov/vuln/detail/CVE-2026-75831)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75831) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-17T18:31:18.941366Z"}, {"uuid": "00604536-ab80-4174-8e5a-42eebf26c838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75831", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-6qw9-4vv5-jr97", "content": "", "creation_timestamp": "2026-09-17T18:35:02.410000Z"}, {"uuid": "757eab8f-fbca-4258-928f-88d48c9347c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75837", "type": "seen", "source": "https://gist.github.com/alon710/70fc2f1f262a7b3002a77491b67fce87", "content": "# CVE-2026-75837: CVE-2026-75837: Privilege Escalation in Grav CMS via Missing Blueprint Validation\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75837\n\n## Summary\nCVE-2026-75837 is a critical privilege escalation vulnerability affecting the Grav Flat-File Content Management System (CMS) in versions prior to 2.0.14. Due to a missing security guard on the access field within the core Flex group blueprint configuration file (system/blueprints/user/group.yaml), a delegated administrative operator can submit a crafted payload to elevate their permissions to super-administrator, which can then be leveraged to achieve remote code execution.\n\n## TL;DR\nA missing security decorator in Grav's group blueprint allowed delegated admin users to assign themselves super-admin privileges, leading to potential remote code execution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-269\n- **Attack Vector**: Network\n- **CVSS v3.1**: 9.1 (Critical)\n- **EPSS Score**: 0.00339 (Percentile: 27.20%)\n- **Exploit Status**: PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Grav CMS\n- **grav**: < 2.0.14 (Fixed in: `2.0.14`)\n\n## Mitigation\n\n- Upgrade Grav CMS to version 2.0.14 or above\n- Apply manual hotfix to system/blueprints/user/group.yaml if immediate upgrade is not feasible\n- Implement regular audits of user group configuration files for unauthorized permissions\n\n**Remediation Steps:**\n1. Locate system/blueprints/user/group.yaml inside your Grav installation directory.\n2. Find the 'access:' field parameter.\n3. Add 'security@: admin.super' under the access configuration parameters.\n4. Save the file and clear the Grav cache by executing 'bin/grav clear-cache'.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/getgrav/grav/security/advisories/GHSA-xhfv-7758-r9hx)\n- [National Vulnerability Database (NVD)](https://nvd.nist.gov/vuln/detail/CVE-2026-75837)\n- [Vulnerability & Exploit Research Release](https://www.vulncheck.com/advisories/grav-before-privilege-escalation-via-group-access-field)\n- [Git Commit Patch Diff](https://github.com/getgrav/grav/commit/5192316f5bf0f033636f43561829d7fc13a4ab64)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75837) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-17T22:32:09.073841Z"}, {"uuid": "8f5c2797-7f34-4399-9aa2-51d7d67108e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75837", "type": "published-proof-of-concept", "source": "https://github.com/getgrav/grav/security/advisories/GHSA-xhfv-7758-r9hx", "content": "", "creation_timestamp": "2026-09-17T22:35:04.304326Z"}, {"uuid": "5b3acdd6-e83a-44cc-a751-46885a386406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75834", "type": "seen", "source": "https://gist.github.com/alon710/ad6e1e5488ae59b7f526abb734e7c86a", "content": "# CVE-2026-75834: CVE-2026-75834: Input Sanitization Bypass leading to Stored XSS in Grav CMS\n\n> **CVSS Score:** 5.4\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75834\n\n## Summary\nCVE-2026-75834 is a stored Cross-Site Scripting (XSS) vulnerability in Grav CMS core, caused by a design flaw in its input validation wrapper Security::detectXss(). Regular expressions using the PCRE UTF-8 /u modifier fail-open when encountering invalid UTF-8 sequences or when the PCRE JIT stack limit is exhausted, allowing authenticated users with page-editing privileges to save malicious HTML and scripts.\n\n## TL;DR\nA critical security bypass in Grav CMS's XSS safety gate allows attackers to inject and store arbitrary HTML/JavaScript by passing invalid UTF-8 bytes or oversized elements, triggering silent engine failures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (Authenticated Page-Edit Permissions Required)\n- **CVSS v3.1 Score**: 5.4 (Medium)\n- **EPSS Score**: 0.00182 (0.18% Probability)\n- **Impact**: Stored Cross-Site Scripting (XSS) / Account Takeover\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **CISA KEV Status**: Not listed\n\n## Affected Systems\n\n- Grav CMS Core\n- **grav**: < 2.0.14 (Fixed in: `2.0.14`)\n\n## Mitigation\n\n- Upgrade core Grav CMS deployment to version 2.0.14 or above\n- Apply strict input validation on markdown file writes via WAF filters\n- Run server-side sweeps to detect broken encoding formats in site text storage\n\n**Remediation Steps:**\n1. Review user directories for modifications executed inside pages containing non-ASCII values\n2. Update system dependencies and apply commit 5192316f5bf0f033636f43561829d7fc13a4ab64 manually if pinned to an older version\n3. Enforce multi-factor authentication and role limits for editor-level profiles\n\n## References\n\n- [GitHub Security Advisory GHSA-q2j8-x8hf-63ch](https://github.com/getgrav/grav/security/advisories/GHSA-q2j8-x8hf-63ch)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/grav-before-stored-xss-via-invalid-utf-8-byte)\n- [Remediation Commit](https://github.com/getgrav/grav/commit/5192316f5bf0f033636f43561829d7fc13a4ab64)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75834) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-17T23:31:57.309916Z"}, {"uuid": "03c45dea-7db0-4350-ae86-535f9e1662e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75837", "type": "seen", "source": "https://gist.github.com/alon710/70fc2f1f262a7b3002a77491b67fce87", "content": "# CVE-2026-75837: CVE-2026-75837: Privilege Escalation in Grav CMS via Missing Blueprint Validation\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75837\n\n## Summary\nCVE-2026-75837 is a critical privilege escalation vulnerability affecting the Grav Flat-File Content Management System (CMS) in versions prior to 2.0.14. Due to a missing security guard on the access field within the core Flex group blueprint configuration file (system/blueprints/user/group.yaml), a delegated administrative operator can submit a crafted payload to elevate their permissions to super-administrator, which can then be leveraged to achieve remote code execution.\n\n## TL;DR\nA missing security decorator in Grav's group blueprint allowed delegated admin users to assign themselves super-admin privileges, leading to potential remote code execution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-269\n- **Attack Vector**: Network\n- **CVSS v3.1**: 9.1 (Critical)\n- **EPSS Score**: 0.00339 (Percentile: 27.20%)\n- **Exploit Status**: PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Grav CMS\n- **grav**: < 2.0.14 (Fixed in: `2.0.14`)\n\n## Mitigation\n\n- Upgrade Grav CMS to version 2.0.14 or above\n- Apply manual hotfix to system/blueprints/user/group.yaml if immediate upgrade is not feasible\n- Implement regular audits of user group configuration files for unauthorized permissions\n\n**Remediation Steps:**\n1. Locate system/blueprints/user/group.yaml inside your Grav installation directory.\n2. Find the 'access:' field parameter.\n3. Add 'security@: admin.super' under the access configuration parameters.\n4. Save the file and clear the Grav cache by executing 'bin/grav clear-cache'.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/getgrav/grav/security/advisories/GHSA-xhfv-7758-r9hx)\n- [National Vulnerability Database (NVD)](https://nvd.nist.gov/vuln/detail/CVE-2026-75837)\n- [Vulnerability & Exploit Research Release](https://www.vulncheck.com/advisories/grav-before-privilege-escalation-via-group-access-field)\n- [Git Commit Patch Diff](https://github.com/getgrav/grav/commit/5192316f5bf0f033636f43561829d7fc13a4ab64)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75837) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-18T00:00:39.719015Z"}, {"uuid": "52df8b46-c5d8-4441-b60e-d2f2f25da38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75834", "type": "seen", "source": "https://gist.github.com/alon710/ad6e1e5488ae59b7f526abb734e7c86a", "content": "# CVE-2026-75834: CVE-2026-75834: Input Sanitization Bypass leading to Stored XSS in Grav CMS\n\n> **CVSS Score:** 5.4\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75834\n\n## Summary\nCVE-2026-75834 is a stored Cross-Site Scripting (XSS) vulnerability in Grav CMS core, caused by a design flaw in its input validation wrapper Security::detectXss(). Regular expressions using the PCRE UTF-8 /u modifier fail-open when encountering invalid UTF-8 sequences or when the PCRE JIT stack limit is exhausted, allowing authenticated users with page-editing privileges to save malicious HTML and scripts.\n\n## TL;DR\nA critical security bypass in Grav CMS's XSS safety gate allows attackers to inject and store arbitrary HTML/JavaScript by passing invalid UTF-8 bytes or oversized elements, triggering silent engine failures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (Authenticated Page-Edit Permissions Required)\n- **CVSS v3.1 Score**: 5.4 (Medium)\n- **EPSS Score**: 0.00182 (0.18% Probability)\n- **Impact**: Stored Cross-Site Scripting (XSS) / Account Takeover\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **CISA KEV Status**: Not listed\n\n## Affected Systems\n\n- Grav CMS Core\n- **grav**: < 2.0.14 (Fixed in: `2.0.14`)\n\n## Mitigation\n\n- Upgrade core Grav CMS deployment to version 2.0.14 or above\n- Apply strict input validation on markdown file writes via WAF filters\n- Run server-side sweeps to detect broken encoding formats in site text storage\n\n**Remediation Steps:**\n1. Review user directories for modifications executed inside pages containing non-ASCII values\n2. Update system dependencies and apply commit 5192316f5bf0f033636f43561829d7fc13a4ab64 manually if pinned to an older version\n3. Enforce multi-factor authentication and role limits for editor-level profiles\n\n## References\n\n- [GitHub Security Advisory GHSA-q2j8-x8hf-63ch](https://github.com/getgrav/grav/security/advisories/GHSA-q2j8-x8hf-63ch)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/grav-before-stored-xss-via-invalid-utf-8-byte)\n- [Remediation Commit](https://github.com/getgrav/grav/commit/5192316f5bf0f033636f43561829d7fc13a4ab64)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75834) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-18T00:00:39.664080Z"}]}