CVE ID :CVE-2026-56700 Published : June 30, 2026, 10:08 p.m. | 1 hour, 4 minutes ago Description :Grav CMS before 2.0.0-beta.2 contains multiple code-execution vulnerabilities. Three unsafe unserialize() calls - in Scheduler\JobQueue, Framework\Cache\Adapter\FileCache, and Session -...

#Sicherheitslücke #APT

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-56700 - Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection

VERWANDTEARTIKEL

CVE-2026-57995 - phpMyFAQ - Privilege Escalation via Missing Self-Rights Constraint in GroupController::updatePermissions

CVE-2026-56300 - Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functions

CVE-2026-56286 - Capgo - Account Deletion Without Password Confirmation

CVE-2026-56278 - Flowise - Session Hijacking via Weak Default Express Session Secret

CVE-2026-56264 - Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint

CVE-2026-56233 - Capgo - SSRF and Privilege Escalation via Path Traversal in Builder Upload Proxy