cve-2026-100671-poc

CVE-2026-100671 — Grav Twig session-cookie disclosure Minimal, local-only verifier for the Grav content-Twig/page-cache session takeover fixed in Grav 2.0.25. Advisories: CVE-2026-100671 GHSA-pp89-h475-7gj6 Grav 2.0.25 release Scope exploit.py is deliberately restricted to loopback targets:...