https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 23:03:51 +0000 https://vulnerability.circl.lu/sighting/c7ab6a3b-eda4-4895-98c4-b7bfccf7ce81/export {"uuid": "c7ab6a3b-eda4-4895-98c4-b7bfccf7ce81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72695", "type": "seen", "source": "https://gist.github.com/alon710/424c5810a1f7a2ef19ef90cac7c85184", "content": "# CVE-2026-72695: CVE-2026-72695: Authenticated Path Traversal and Arbitrary File Deletion in Grav CMS MediaUploadTrait\n\n> **CVSS Score:** 8.1\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72695\n\n## Summary\nA path traversal vulnerability exists in Grav CMS versions prior to 2.0.16. The flaw occurs within the file validation mechanisms of the MediaUploadTrait, enabling authenticated users with media management privileges to bypass sandbox limitations. This allows the deletion of arbitrary files on the filesystem, which can result in denial of service or remote code execution.\n\n## TL;DR\nAn authenticated path traversal vulnerability in Grav CMS before 2.0.16 allows media administrators to delete arbitrary files on the system by bypassing incomplete directory validation checks in the MediaUploadTrait.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22: Improper Limitation of a Pathname to a Restricted Directory\n- **Attack Vector**: Network (Unauthenticated: No, Requires authenticated media management privileges)\n- **CVSS v3.1 Score**: 8.1 (High)\n- **EPSS Score**: 0.00567 (Percentile: 45.53%)\n- **Impact**: Arbitrary File Deletion / Denial of Service / Remote Code Execution\n- **Exploit Status**: Proof-of-Concept (PoC)\n- **KEV Status**: Not Listed in CISA KEV Catalog\n\n## Affected Systems\n\n- Grav CMS installations prior to version 2.0.16\n- Plugins incorporating system/src/Grav/Common/Media/Traits/MediaUploadTrait.php\n- **Grav CMS**: < 2.0.16 (Fixed in: `2.0.16`)\n\n## Mitigation\n\n- Upgrade Grav CMS to version 2.0.16 or newer.\n- Enforce strict filesystem permissions restricting write access to configuration folders.\n- Implement WAF rules targeting directory traversal sequences in media endpoints.\n- Restrict administrative media management permissions using role-based access control.\n\n**Remediation Steps:**\n1. Identify vulnerable Grav installations running versions prior to 2.0.16.\n2. Download the updated Grav CMS core package or execute the command-line update tool 'bin/gpm self-upgrade'.\n3. Verify the integration of commit f6883ed50764cb7dea41f9260e096374b4e17aeb in the codebase.\n4. Check third-party plugins utilizing MediaUploadInterface to ensure they inherit the updated traits.\n\n## References\n\n- [GitHub Security Advisory GHSA-jq29-c7v8-rg55](https://github.com/getgrav/grav/security/advisories/GHSA-jq29-c7v8-rg55)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/grav-before-path-traversal-via-mediauploadtrait-deletefile)\n- [NVD CVE Details](https://nvd.nist.gov/vuln/detail/CVE-2026-72695)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72695) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-18T03:31:25.434230Z"} {"uuid": "c7ab6a3b-eda4-4895-98c4-b7bfccf7ce81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72695", "type": "seen", "source": "https://gist.github.com/alon710/424c5810a1f7a2ef19ef90cac7c85184", "content": "# CVE-2026-72695: CVE-2026-72695: Authenticated Path Traversal and Arbitrary File Deletion in Grav CMS MediaUploadTrait\n\n> **CVSS Score:** 8.1\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72695\n\n## Summary\nA path traversal vulnerability exists in Grav CMS versions prior to 2.0.16. The flaw occurs within the file validation mechanisms of the MediaUploadTrait, enabling authenticated users with media management privileges to bypass sandbox limitations. This allows the deletion of arbitrary files on the filesystem, which can result in denial of service or remote code execution.\n\n## TL;DR\nAn authenticated path traversal vulnerability in Grav CMS before 2.0.16 allows media administrators to delete arbitrary files on the system by bypassing incomplete directory validation checks in the MediaUploadTrait.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22: Improper Limitation of a Pathname to a Restricted Directory\n- **Attack Vector**: Network (Unauthenticated: No, Requires authenticated media management privileges)\n- **CVSS v3.1 Score**: 8.1 (High)\n- **EPSS Score**: 0.00567 (Percentile: 45.53%)\n- **Impact**: Arbitrary File Deletion / Denial of Service / Remote Code Execution\n- **Exploit Status**: Proof-of-Concept (PoC)\n- **KEV Status**: Not Listed in CISA KEV Catalog\n\n## Affected Systems\n\n- Grav CMS installations prior to version 2.0.16\n- Plugins incorporating system/src/Grav/Common/Media/Traits/MediaUploadTrait.php\n- **Grav CMS**: < 2.0.16 (Fixed in: `2.0.16`)\n\n## Mitigation\n\n- Upgrade Grav CMS to version 2.0.16 or newer.\n- Enforce strict filesystem permissions restricting write access to configuration folders.\n- Implement WAF rules targeting directory traversal sequences in media endpoints.\n- Restrict administrative media management permissions using role-based access control.\n\n**Remediation Steps:**\n1. Identify vulnerable Grav installations running versions prior to 2.0.16.\n2. Download the updated Grav CMS core package or execute the command-line update tool 'bin/gpm self-upgrade'.\n3. Verify the integration of commit f6883ed50764cb7dea41f9260e096374b4e17aeb in the codebase.\n4. Check third-party plugins utilizing MediaUploadInterface to ensure they inherit the updated traits.\n\n## References\n\n- [GitHub Security Advisory GHSA-jq29-c7v8-rg55](https://github.com/getgrav/grav/security/advisories/GHSA-jq29-c7v8-rg55)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/grav-before-path-traversal-via-mediauploadtrait-deletefile)\n- [NVD CVE Details](https://nvd.nist.gov/vuln/detail/CVE-2026-72695)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72695) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-18T03:31:25.434230Z"} https://vulnerability.circl.lu/sighting/c7ab6a3b-eda4-4895-98c4-b7bfccf7ce81/export Fri, 18 Sep 2026 03:31:25 +0000 https://vulnerability.circl.lu/sighting/cb582db0-b962-46b0-a1ca-6622d3d2416a/export {"uuid": "cb582db0-b962-46b0-a1ca-6622d3d2416a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72698", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-p597-crqc-m349", "content": "", "creation_timestamp": "2026-09-17T22:35:32.675857Z"} {"uuid": "cb582db0-b962-46b0-a1ca-6622d3d2416a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72698", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-p597-crqc-m349", "content": "", "creation_timestamp": "2026-09-17T22:35:32.675857Z"} https://vulnerability.circl.lu/sighting/cb582db0-b962-46b0-a1ca-6622d3d2416a/export Thu, 17 Sep 2026 22:35:32 +0000 https://vulnerability.circl.lu/sighting/6db9f3c4-09cd-4f7b-9cc0-e974fe8abb59/export {"uuid": "6db9f3c4-09cd-4f7b-9cc0-e974fe8abb59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72697", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-47ch-6w46-6xm7", "content": "", "creation_timestamp": "2026-09-17T22:35:28.685284Z"} {"uuid": "6db9f3c4-09cd-4f7b-9cc0-e974fe8abb59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72697", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-47ch-6w46-6xm7", "content": "", "creation_timestamp": "2026-09-17T22:35:28.685284Z"} https://vulnerability.circl.lu/sighting/6db9f3c4-09cd-4f7b-9cc0-e974fe8abb59/export Thu, 17 Sep 2026 22:35:28 +0000 https://vulnerability.circl.lu/sighting/79907141-9077-444c-8168-7a3000f628ae/export {"uuid": "79907141-9077-444c-8168-7a3000f628ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72695", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-jq29-c7v8-rg55", "content": "", "creation_timestamp": "2026-09-17T22:35:08.127254Z"} {"uuid": "79907141-9077-444c-8168-7a3000f628ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72695", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-jq29-c7v8-rg55", "content": "", "creation_timestamp": "2026-09-17T22:35:08.127254Z"} https://vulnerability.circl.lu/sighting/79907141-9077-444c-8168-7a3000f628ae/export Thu, 17 Sep 2026 22:35:08 +0000 https://vulnerability.circl.lu/sighting/92b32bb9-4486-40b9-adb4-337b0812e004/export {"uuid": "92b32bb9-4486-40b9-adb4-337b0812e004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72699", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzs3rtg2p", "content": "\ud83d\udea8 CVE-2026-72699 \u2014 CVSS 9.3 CRITICAL\n\nThe Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration. ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72699\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T04:07:59.179242Z"} {"uuid": "92b32bb9-4486-40b9-adb4-337b0812e004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72699", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzs3rtg2p", "content": "\ud83d\udea8 CVE-2026-72699 \u2014 CVSS 9.3 CRITICAL\n\nThe Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration. ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72699\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T04:07:59.179242Z"} https://vulnerability.circl.lu/sighting/92b32bb9-4486-40b9-adb4-337b0812e004/export Tue, 25 Aug 2026 04:07:59 +0000 https://vulnerability.circl.lu/sighting/897a25e8-6f95-43bf-9013-b07f17ddafc7/export {"uuid": "897a25e8-6f95-43bf-9013-b07f17ddafc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72699", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtutsahuik2j", "content": "CVE-2026-72699 - grav\nThe login extension used by Grav sites lets anyone try to sign up and see whether an email address is already in use. Because there is no limit on how quickly these checks can be made, a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-25T03:10:04.727618Z"} {"uuid": "897a25e8-6f95-43bf-9013-b07f17ddafc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72699", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtutsahuik2j", "content": "CVE-2026-72699 - grav\nThe login extension used by Grav sites lets anyone try to sign up and see whether an email address is already in use. Because there is no limit on how quickly these checks can be made, a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-25T03:10:04.727618Z"} https://vulnerability.circl.lu/sighting/897a25e8-6f95-43bf-9013-b07f17ddafc7/export Tue, 25 Aug 2026 03:10:04 +0000 https://vulnerability.circl.lu/sighting/663c402b-972d-4609-9371-3b27eb977ff7/export {"uuid": "663c402b-972d-4609-9371-3b27eb977ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72693", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msse7xzuwt25", "content": "\ud83d\udfe0 CVE-2026-72693 - High (7.8)\n\n`openvt -u` is intended to identify the owner of the current VT and then execute `login` as that ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72693/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-11T10:00:54.984887Z"} {"uuid": "663c402b-972d-4609-9371-3b27eb977ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72693", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msse7xzuwt25", "content": "\ud83d\udfe0 CVE-2026-72693 - High (7.8)\n\n`openvt -u` is intended to identify the owner of the current VT and then execute `login` as that ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72693/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-11T10:00:54.984887Z"} https://vulnerability.circl.lu/sighting/663c402b-972d-4609-9371-3b27eb977ff7/export Tue, 11 Aug 2026 10:00:54 +0000 https://vulnerability.circl.lu/sighting/881b05cf-28db-4c22-998e-3c98963be8c7/export {"uuid": "881b05cf-28db-4c22-998e-3c98963be8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72691", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msqhvkuytv24", "content": "\ud83d\udfe0 CVE-2026-72691 - High (7.5)\n\nAn authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an un...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72691/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T16:01:20.697952Z"} {"uuid": "881b05cf-28db-4c22-998e-3c98963be8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72691", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msqhvkuytv24", "content": "\ud83d\udfe0 CVE-2026-72691 - High (7.5)\n\nAn authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an un...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72691/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T16:01:20.697952Z"} https://vulnerability.circl.lu/sighting/881b05cf-28db-4c22-998e-3c98963be8c7/export Mon, 10 Aug 2026 16:01:20 +0000