4 matches found
CVE-2026-72831
creationtimestamp| type| source ---|---|--- 2026-08-14 12:54:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ic5tw5fxhz75e 2026-08-18 11:11:36+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mte3gt5gp52k 2026-08-18 11:11:37+00:00| seen|...
CVE-2026-72831 Grav through 2.0.11 Authentication Bypass via Flex Objects
The Flex Objects plugin through 1.4.6, tested with Grav 2.0.11 contains an incorrect authorization vulnerability in its Flex Objects API. FlexApiController::update checks only the general Flex directory permission and does not apply the additional target/field/super-admin checks enforced by the...
CVE-2026-72831 Grav through 2.0.11 Authentication Bypass via Flex Objects
The Flex Objects plugin through 1.4.6, tested with Grav 2.0.11 contains an incorrect authorization vulnerability in its Flex Objects API. FlexApiController::update checks only the general Flex directory permission and does not apply the additional target/field/super-admin checks enforced by the...
CVE-2026-72831 Grav through 2.0.11 Authentication Bypass via Flex Objects
The Flex Objects plugin through 1.4.6, tested with Grav 2.0.11 contains an incorrect authorization vulnerability in its Flex Objects API. FlexApiController::update checks only the general Flex directory permission and does not apply the additional target/field/super-admin checks enforced by the...