Skip to content
Vulnerability intelligence

CVE-2026-42608: Grav CMS unauthenticated path traversal

Grav 2.x was fixed earlier this year; the 1.7 branch received the patch only after exploit details reached the vendor.

2026