CVE-2026-75827

creationtimestamp| type| source ---|---|--- 2026-08-18 13:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtedqcdgjl23 2026-08-18 14:07:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtefbakr6d2e 2026-09-18 00:31:13+00:00| seen|...

CVE-2026-75827 Grav before 2.0.15 Arbitrary File Write via error_log

Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allowlist. Attackers with page-edit or blueprint-config access can invoke the errorlog function through a data directive ...