114727 matches found
CVE-2026-109319
The Grav Guestbook plugin versions 0.5.0 and 0.5.1 are vulnerable to missing authorization and cross-site request forgery (CSRF) within the Admin moderation actions, specifically for delete , approve , and approveAll . The root cause allows authenticated Admin users without the admin.guestbook pe...
EUVD-2026-97618
Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files...
CVE-2026-109317 Grav API Plugin before 1.0.36 Privilege Escalation via Scalar Access Grants
Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants. Attackers with api.users.write can edit account access maps or invitations so the inheriting...
CVE-2026-109316 Grav Data Manager 1.4.0 through 1.4.5 Unauthenticated File Deletion via Admin
Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files...
CVE-2026-109316 Grav Data Manager 1.4.0 through 1.4.5 Unauthenticated File Deletion via Admin
Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files...
CVE-2026-109317
The Grav grav-plugin-api before version 1.0.36 is vulnerable to a privilege escalation flaw. The root cause is the storage of positive scalar admin or api parent grants, which allows delegated user managers to bypass security checks. An attacker with api.users.write permissions can modify account...
CVE-2026-109316
The Grav Data Manager plugin (versions 1.4.0 through 1.4.5) contains a missing authorization vulnerability. This flaw allows unauthenticated attackers to delete stored data files, such as form submissions, located under user/data/ via the classic Admin integration . Exploitation is possible by se...
EUVD-2026-97619
Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants. Attackers with api.users.write can edit account access maps or invitations so the inheriting...
CVE-2026-109237
The Crawl4AI library (versions 0.9.0 before 0.9.4 ) is vulnerable to an untrusted-config gate bypass . This flaw allows non-admin API clients to bypass restrictions by wrapping forbidden config objects in dict-type wrappers . By sending a laundered LLMConfig with an api_token set to an environmen...
CVE-2026-109237 Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variables
Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers. Attackers can send a laundered LLMConfig with apitoken set to an env reference via /config/dump to read SECRETK...
EUVD-2026-97681
Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers. Attackers can send a laundered LLMConfig with apitoken set to an env reference via /config/dump to read SECRETK...
CVE-2026-109237 Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variables
Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers. Attackers can send a laundered LLMConfig with apitoken set to an env reference via /config/dump to read SECRETK...
CVE-2026-109392 Pimcore through 2026.3.1 Stored XSS via ExternalImage Field Version Preview
Pimcore through 2026.3.1 contains a stored cross-site scripting vulnerability that allows authenticated backend users to inject scripts by storing unescaped URLs in ExternalImage fields. Attackers with data object edit permission can store attribute-breaking payloads that execute JavaScript in th...
CVE-2026-109392
Pimcore versions through 2026.3.1 are vulnerable to a stored cross-site scripting (XSS) flaw within the ExternalImage field. The root cause is the storage of unescaped URLs , which allows authenticated backend users with data object edit permissions to inject attribute-breaking payloads. These pa...
CVE-2026-109392 Pimcore through 2026.3.1 Stored XSS via ExternalImage Field Version Preview
Pimcore through 2026.3.1 contains a stored cross-site scripting vulnerability that allows authenticated backend users to inject scripts by storing unescaped URLs in ExternalImage fields. Attackers with data object edit permission can store attribute-breaking payloads that execute JavaScript in th...
EUVD-2026-97490
Pimcore through 2026.3.1 contains a stored cross-site scripting vulnerability that allows authenticated backend users to inject scripts by storing unescaped URLs in ExternalImage fields. Attackers with data object edit permission can store attribute-breaking payloads that execute JavaScript in th...
CVE-2026-109173
yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject invoices via POST /admin-api/crm/invoice/check. The CrmInvoiceController check handler lacks @PreAuthorize and approver checks are commented out, letting...
CVE-2026-109172
yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject receivables records by calling POST /admin-api/crm/contract-receivables/check. The handler lacks a @PreAuthorize check and the approver checks in...
CVE-2026-109171
yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject contracts by calling POST /admin-api/crm/contract/check. Because CrmContractController lacks @PreAuthorize and approver checks are commented out, attackers ca...
DEBIAN-CVE-2026-108831
A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...