CVE-2026-42608 Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.

Grav is a file-based Web platform. Prior to 2.0.0-beta.2, there is a Path Traversal vulnerability within the FormFlash core component. By manipulating the sessionid passed as form-flash-id in POST requests, an unauthenticated attacker can traverse the filesystem to create arbitrary directories an...

CVE-2026-42608

Grav CVE-2026-42608 describes an unauthenticated path traversal in the FormFlash component that lets an attacker manipulate the session_id (__form-flash-id) in POST requests to traverse the filesystem and write an index.yaml, enabling arbitrary directory creation and data manipulation. Affected: ...

CVE-2026-8289

creationtimestamp| type| source ---|---|--- 2026-05-11 14:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlljryfwx42e...

CVE-2026-8288

creationtimestamp| type| source ---|---|--- 2026-05-11 14:45:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllja3l5s32k...

CVE-2026-43464

creationtimestamp| type| source ---|---|--- 2026-05-11 12:34:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllbviobwo2k...

CVE-2026-40989

creationtimestamp| type| source ---|---|--- 2026-05-11 12:05:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mllabzqe2i2x...

CVE-2025-8154

creationtimestamp| type| source ---|---|--- 2026-05-11 11:33:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll6ii73aj2r...

CVE-2026-35157

creationtimestamp| type| source ---|---|--- 2026-05-11 11:28:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll67js4bf2p 2026-05-25 14:02:52+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mmonescdwk2f...

CVE-2025-43992

creationtimestamp| type| source ---|---|--- 2026-05-11 11:23:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll5wlesuw2r 2026-05-25 14:02:52+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mmonescdwk2f...

CVE-2025-10908

creationtimestamp| type| source ---|---|--- 2026-05-11 10:48:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll3ymlyzz2o...

CVE-2026-41713

creationtimestamp| type| source ---|---|--- 2026-05-11 09:04:11+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-443 2026-05-11 12:05:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mllabzqe2i2x 2026-05-12 11:59:24+00:00| seen|...

CVE-2026-41712

creationtimestamp| type| source ---|---|--- 2026-05-11 09:04:11+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-443 2026-05-11 12:05:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mllabzqe2i2x 2026-05-12 11:59:16+00:00| seen|...

CVE-2026-8272

creationtimestamp| type| source ---|---|--- 2026-05-11 07:11:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkptugi622e...

CVE-2026-8273

creationtimestamp| type| source ---|---|--- 2026-05-11 06:56:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkp2buqap2e...

CVE-2026-8265

creationtimestamp| type| source ---|---|--- 2026-05-11 06:53:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkotkxbam2v...

CVE-2026-8267

creationtimestamp| type| source ---|---|--- 2026-05-11 06:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkonlw23u2e...

CVE-2026-8264

creationtimestamp| type| source ---|---|--- 2026-05-11 06:41:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlko6swk4l2c...

CVE-2026-1677

creationtimestamp| type| source ---|---|--- 2026-05-11 06:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlknwtnzc62e...

CVE-2026-6956

creationtimestamp| type| source ---|---|--- 2026-05-11 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-6909 2026-05-11 10:53:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll4byg77c2q...

CVE-2026-6909

creationtimestamp| type| source ---|---|--- 2026-05-11 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-6909 2026-05-11 11:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll4ndh2hm2q...