{"vulnerability": "CVE-2026-62232", "sightings": [{"uuid": "28007d33-2309-4847-a916-82494cccd490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62232", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqsqbhg4qj2v", "content": "CVE-2026-62232 - grav\nGrav versions before 2.0.4 have a security weakness that allows attackers to bypass the extra protection of 2-factor authentication. This means that even with an extra verification step,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-07-17T02:46:05.745567Z"}, {"uuid": "749fa97f-2480-435b-9009-8ed5eb9e3da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62232", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116933081864341410", "content": "CVE-2026-62232 (CRITICAL): getgrav Grav <2.0.4 has a 2FA bypass flaw \u2014 attackers knowing a user's password can overwrite the 2FA secret, reducing protection to password-only. Monitor & restrict access. Patch status pending. https://radar.offseq.com/threat/cve-2026-62232-missing-authorization-in-getgrav-gr-604d58721f0c378d #OffSeq #CVE202662232 #2FA #infosec", "creation_timestamp": "2026-07-17T03:00:31.343944Z"}, {"uuid": "d44f325c-259a-4f6d-ab8e-6e813a76b944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62232", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqsr3bz3zw2t", "content": "Grav <2.0.4 hit by a CRITICAL vulnerability: attackers with a valid password can reset user 2FA secrets, bypassing multi-factor auth. Restrict access, monitor 2FA changes, and check for patches. https://radar.offseq.com/threat/cve-2026-62232-missing-authorization-in-getgrav-gr-604d58721f0c378d #O...", "creation_timestamp": "2026-07-17T03:00:34.023427Z"}, {"uuid": "18a8c2ab-0a1a-4dc1-9cf3-2478065027f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqssdyfti62i", "content": "CVE-2026-62232 - Grav\nCVE ID : CVE-2026-62232\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FASecret task checks only user existence...", "creation_timestamp": "2026-07-17T03:23:18.372029Z"}]}