CVE-2026-65603

The Grav Login plugin grav-plugin-login versions = 3.8.11 contain a privilege escalation flaw in the authenticated profile self-update handler processUserProfile, the updateuser task. Unlike the registration handler, this handler does not strip privilege fields 'groups','access' from user-submitt...

GHSA-MMX7-HFXF-JPPX

creationtimestamp| type| source ---|---|--- 2026-07-22 12:01:01+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmdckvy24 2026-08-12 12:01:33+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3gmvgco2a...

EUVD-2026-47647

The Grav Login plugin grav-plugin-login versions = 3.8.11 contain a privilege escalation flaw in the authenticated profile self-update handler processUserProfile, the updateuser task. Unlike the registration handler, this handler does not strip privilege fields 'groups','access' from user-submitt...

CVE-2026-65603 Grav Login Plugin 3.8.11 Privilege Escalation via Profile Update

The Grav Login plugin grav-plugin-login versions = 3.8.11 contain a privilege escalation flaw in the authenticated profile self-update handler processUserProfile, the updateuser task. Unlike the registration handler, this handler does not strip privilege fields 'groups','access' from user-submitt...

CVE-2026-65603

Summary: Grav Login Plugin for Grav (grav-plugin-login)

CVE-2026-15787

creationtimestamp| type| source ---|---|--- 2026-07-22 10:01:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mra2w4qbyu2e...

CVE-2026-2406

creationtimestamp| type| source ---|---|--- 2026-07-22 09:51:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mra2e7rh5g2e...

OPENSUSE-SU-2026:21412-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes outside the configured data director bsc1271629. - CVE-2026-15043: DBI:SQL:Nano has incorrect predicate evaluation,...

CVE-2026-62561

creationtimestamp| type| source ---|---|--- 2026-07-22 08:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr7u7at2fx22 2026-07-23 18:21:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-15802

creationtimestamp| type| source ---|---|--- 2026-07-22 05:50:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7mwno5yk2q 2026-07-22 05:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr7ngp3y5q2f 2026-07-22 08:48:37+00:00| seen|...

CVE-2026-10671

creationtimestamp| type| source ---|---|--- 2026-07-22 04:40:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7izakmcz2n 2026-07-22 04:45:09+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr7jaxlvqv2j...

CVE-2026-10573

creationtimestamp| type| source ---|---|--- 2026-07-22 04:39:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7iwgepat24 2026-07-22 04:39:25+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr7iwpdmmd2g...

CVE-2026-10669

creationtimestamp| type| source ---|---|--- 2026-07-22 04:38:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7ivonyll2y...

CVE-2026-63263

creationtimestamp| type| source ---|---|--- 2026-07-22 02:47:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7cpeg5yx2s...

CVE-2026-63143

creationtimestamp| type| source ---|---|--- 2026-07-22 02:31:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7brop2km2a...

CVE-2026-62504

creationtimestamp| type| source ---|---|--- 2026-07-22 01:45:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr777y6wgp2i 2026-07-23 18:20:28+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 21:37:07+00:00| seen|...

CVE-2026-62546

creationtimestamp| type| source ---|---|--- 2026-07-22 01:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr773trwh72i 2026-07-22 16:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrarcxmbpu23 2026-07-23 18:20:51+00:00| seen|...

CVE-2026-62513

creationtimestamp| type| source ---|---|--- 2026-07-22 01:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr76fe22e32q 2026-07-23 18:20:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

PT-2026-63361

The Grav Login plugin grav-plugin-login versions = 3.8.11 contain a privilege escalation flaw in the authenticated profile self-update handler processUserProfile, the update user task. Unlike the registration handler, this handler does not strip privilege fields 'groups','access' from...

CVE-2026-60326

creationtimestamp| type| source ---|---|--- 2026-07-21 23:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6z7nghko2a 2026-07-23 16:51:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 17:07:12+00:00| seen|...