{"vulnerability": "CVE-2026-7583", "sightings": [{"uuid": "004e1bff-0ef8-4692-ab5e-a89f32db84e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75832", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mteec6zzp323", "content": "CVE-2026-75832 - grav\nA security flaw in the Grav API plugin allows unauthorized users to upload files and view other users' files. This can happen if an attacker has an API key with limited permissions. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-18T13:50:04.383447Z"}, {"uuid": "2af79493-e00e-4315-b6ff-2182d8ae20eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75835", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mteecacyal23", "content": "CVE-2026-75835 - grav\nGrav's API plugin, used for website administration, has a security flaw that allows an attacker with an API key to access sensitive information they shouldn't be able to see. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-18T13:50:05.895297Z"}, {"uuid": "f5a6b890-4bbf-4423-88c9-ae7b7c672718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75832", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefbrptnq2y", "content": "\ud83d\udea8 CVE-2026-75832 \u2014 CVSS 9.3 CRITICAL\n\nThe Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0) before version 1.0.14 (fixed in 1.0.15...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75832\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:07:44.287420Z"}, {"uuid": "bc47c1bd-2ac2-417f-8d24-a7c4ab316fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75835", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefc6ei4q2c", "content": "\ud83d\udea8 CVE-2026-75835 \u2014 CVSS 9.3 CRITICAL\n\nGrav API plugin (getgrav/grav-plugin-api) before 1.0.14 contains a missing authorization vulnerability in u...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75835\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:07:57.295046Z"}, {"uuid": "7a20f7ad-250d-404c-9eef-96f61646d2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75837", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefck2d542b", "content": "\ud83d\udea8 CVE-2026-75837 \u2014 CVSS 9.3 CRITICAL\n\nGrav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@:...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75837\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:08:10.096449Z"}, {"uuid": "b2bece30-7e44-42e4-82f7-4e885daa03d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75837", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mte6petjve2t", "content": "CVE-2026-75837 - grav\nGrav users with lower permissions can gain super-admin rights by exploiting a weakness in the group access field. This allows them to access sensitive features. Update to Grav 2.0.14 or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-18T12:10:07.187405Z"}]}