PT-2026-69111

Name of the Vulnerable Software and Affected Versions Grav CMS scheduler-webhook plugin affected versions not specified Description An authentication bypass exists in the webhook token check of the scheduler-webhook plugin. When the webhook feature is enabled but no webhookToken is configured, th...

CVE-2026-11430: Incorrect Implementation of Authentication Algorithm

Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook feature is enabled but no webhookToken is configured, a compound conditional short-circuits and skips token validation, so an unauthenticated remote attacker who can reach POST...