CVE-2026-42613 - Grav: Privilege Escalation via Missing Server-Side Validation of groups/access
CVE ID :CVE-2026-42613 Published : May 11, 2026, 4:17 p.m. | 48 minutes ago Description :Grav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Login plugin accepts attacker-controlled groups and access fields from the registration POST data without serve
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] LayerZero apologizes for response to major DeFi hack - The Logic
- [CYBER] FROM TOR TO TRACEABLE: WHY 90% OF 'ANONYMOUS' Threat actors ARE ONE MISTAKE AWAY FROM EXPOSURE
- [CYBER] Kia’s cyber-inspired electric sports car is ‘90% production-ready’
- [CYBER] Google Says Hackers Used AI To Create Zero Day Security Flaw For the First Time
- [CYBER] Foxconn Wisconsin breach reportedly linked to Nitrogen ransomware, 8TB data theft claim
- [CYBER] Vibe Coding is Fun Until You Hit Production