Search
Find merged stories by title or summary.
Vulnerabilities & Patches
Emerging1 src
NVD-CVE-2026-86193 - National Institute of Standards and Technology (.gov)
NVD-CVE-2026-86193 National Institute of Standards and Technology (.gov)
Vulnerabilities & Patches
Emerging1 src
CVE-2026-86193 - Grav API Plugin Authentication Bypass via Group-Inherited Super
CVE ID : CVE-2026-86193 Published : Sept. 5, 2026, 1:18 p. m. • 7 hours, 27 minutes ago Description : grav-plugin-api before 1. 0. 20 fails to validate group-inherited super permissions in user-management guards, allowing non-super user managers to modify super-admin accounts. Attackers with api. access and api. users. write can patch password fields on group-super accounts to gain full administrative control. Severity: 8.7 • HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
You've reached the end of current stories for this search.
