{"vulnerability": "cve-2026-7283", "sightings": [{"uuid": "be938472-1dbd-4524-b685-a02b00a81886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72830", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117093749633609950", "content": "Grav API plugin <1.0.13 has a CRITICAL flaw (CVE-2026-72830): scoped API keys can inject arbitrary commands into scheduler config, leading to remote code execution. Patch now! https://radar.offseq.com/threat/cve-2026-72830-improper-privilege-management-in-getgrav-grav-96262eb7a2b2ec89 #OffSeq #CVE202672830 #Grav #RCE #Infosec", "creation_timestamp": "2026-08-14T12:00:27.520443Z"}, {"uuid": "539215a0-7607-48b4-9465-0dde3a07e82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72830", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt24cjqikv2f", "content": "CVE-2026-72830: Grav API plugin before 1.0.13 has CRITICAL privilege flaw. Attackers with certain API keys can achieve remote code execution. Patch ASAP. https://radar.offseq.com/threat/cve-2026-72830-improper-privilege-management-in-getgrav-grav-96262eb7a2b2ec89 #OffSeq #CVE202672830 #Grav", "creation_timestamp": "2026-08-14T12:00:28.897482Z"}, {"uuid": "a0b13b51-6f54-478d-82e1-e755dc83a171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72830", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt273a3gm42f", "content": "CVE-2026-72830 - grav\nVersions of the Grav API plugin before 1.0.13 have a security flaw that allows attackers to execute arbitrary code on a website. This could allow an attacker to access and modify sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-14T12:50:04.576776Z"}, {"uuid": "def8967a-bba5-4bd6-8aa8-8f885f768c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ic5tw5fxhz75e", "content": "CVE-2026-72831 - Grav through 2.0.11 Authentication Bypass via Flex Objects\nCVE ID : CVE-2026-72831\n \n Published : Aug. 14, 2026, 11:35 a.m. | 37\u00a0minutes ago\n \n Description : The Flex Objects plugin (through 1.4.6, tested with Grav 2.0.11) contains an incorrect authorization v...", "creation_timestamp": "2026-08-14T12:54:45.140976Z"}, {"uuid": "cf25382a-0c48-4974-9a83-6bc30a594d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4xfdxoho6ndvg", "content": "CVE-2026-72833 - Grav 1.0.6 through 1.0.11 Privilege Escalation via Scoped API Keys\nCVE ID : CVE-2026-72833\n \n Published : Aug. 14, 2026, 11:35 a.m. | 37\u00a0minutes ago\n \n Description : The Grav API plugin (getgrav/grav-plugin-api) versions >= 1.0.6 and <= 1.0.11 contain a ...", "creation_timestamp": "2026-08-14T13:00:41.258513Z"}, {"uuid": "6e649e22-07ab-454d-9d8b-19144cce50ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt27o7uejz26", "content": "\ud83d\udfe0 CVE-2026-72836 - High (8.1)\n\nFileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home d...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72836/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T13:00:43.736351Z"}, {"uuid": "a650c9af-3f67-4a00-8dfd-c50479146612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72837", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt27ogqpiw2b", "content": "\ud83d\udfe0 CVE-2026-72837 - High (8.8)\n\nFile Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72837/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T13:00:49.695618Z"}, {"uuid": "531c8e7d-0128-4c87-bf8f-0bfa29bda02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hiobi5qimz7ko", "content": "CVE-2026-72836 - FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass\nCVE ID : CVE-2026-72836\n \n Published : Aug. 14, 2026, 11:35 a.m. | 37\u00a0minutes ago\n \n Description : FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home...", "creation_timestamp": "2026-08-14T13:06:51.249157Z"}, {"uuid": "6ba89d74-1317-4dd4-872b-37a810d9c4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fmzbywzbksnxu", "content": "CVE-2026-72837 - File Browser before 2.63.20 Privilege Escalation via Proxy Authentication\nCVE ID : CVE-2026-72837\n \n Published : Aug. 14, 2026, 11:35 a.m. | 37\u00a0minutes ago\n \n Description : File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy...", "creation_timestamp": "2026-08-14T13:12:42.308414Z"}, {"uuid": "01a9fae9-5902-4354-b803-ccff248efe7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2aqvnzef2f", "content": "CVE-2026-72836 - filebrowser\nFileBrowser versions before 2.63.19 allow unauthorized access to other users' files on case-insensitive filesystems, like Windows. This means a new user can access and delete files\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#filebrowser #CVE #infosec", "creation_timestamp": "2026-08-14T13:20:05.365093Z"}, {"uuid": "20ccec1a-1707-4352-ac5d-0bb62a0e959b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "seen", "source": "Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw", "content": "", "creation_timestamp": "2026-08-15T08:00:05.041663Z"}, {"uuid": "c80df349-2ca4-42c1-a633-9c68d6102283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4sdjqoq223", "content": "CVE-2026-72839\nWhen self-signup is enabled on Filebrowser, attackers can create accounts with full access to all files on the server. This is a serious issue because it allows unauthorized access to sensitive data. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T13:40:04.267913Z"}, {"uuid": "ab91a3d3-7c77-48a3-ac9a-3cb218cf2ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "published-proof-of-concept", "source": "Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw", "content": "", "creation_timestamp": "2026-08-16T00:00:46.500190Z"}, {"uuid": "420f3051-5f67-46d2-a020-06f13197cf72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msypldq3wl2e", "content": "CVE-2026-72839 - filebrowser\nAn attacker can create an account with full access to all files on the server, even if they're not supposed to have any permissions. This is a significant risk because it allows\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#filebrowser #CVE #infosec", "creation_timestamp": "2026-08-13T22:40:06.105736Z"}, {"uuid": "bf903ddf-190a-4f8f-a518-11aa46cd855e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72831", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mte3gt5gp52k", "content": "CVE-2026-72831 - Auth bypass in Grav Flex Objects plugin \u22641.4.6. Improper authorization lets low-priv users exploit generic /api/v1 endpoint. CVSS 8.8. Exploit risk high. Update immediately. #CVE #GravCMS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-72831/", "creation_timestamp": "2026-08-18T11:11:36.038445Z"}, {"uuid": "3b0d8f34-ec71-4930-9d03-3e535f34f6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72831", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117116206832392341", "content": "CVE-2026-72831 - Auth bypass in Grav Flex Objects plugin \u22641.4.6. Improper authorization lets low-priv users exploit generic /api/v1 endpoint. CVSS 8.8. Exploit risk high. Update immediately. #CVE #GravCMS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72831/", "creation_timestamp": "2026-08-18T11:11:37.716663Z"}]}