CVE ID :CVE-2026-61457 Published : July 15, 2026, 12:18 p.m. | 16 minutes ago Description :The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 contains a file upload extension bypass in the API media controller. HandlesMediaUploads::validateFileExtension() inspects only the final file...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-61457 - Grav before 1.0.3 Remote Code Execution via File Upload Extension Bypass

VERWANDTEARTIKEL

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

CVE-2026-61873 - Grav before 9.1.8 Arbitrary File Write via Twig-Processed Filename

CVE-2026-61443 - PraisonAI before 1.6.78 Remote Code Execution via SkillTools

CVE-2026-61451 - Grav before 1.0.4 Password Reset Token Poisoning via admin_base_url

CVE-2026-61430 - PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawl

CVE-2026-61433 - PraisonAI before 4.6.78 Code Injection via API deployment generator