CVE ID :CVE-2026-116019 Published : Oct. 24, 2026, 11:40 a.m. | 38 minutes ago Description :Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public static methods by relocating data-*@ directives with unset-name@ or integer...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-116019 - Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives

VERWANDTEARTIKEL

The PHP Meltdown Shows How AI Makes Bugs More Exploitable

CVE-2026-116014 - open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType

CVE-2026-116009 - Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action

CVE-2026-110018 - aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute

CVE-2026-111943

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software