EPSS 0.00 (nejvyšší)
Multiple high severity vulnerabilities in Grav CMS
Classification: Severe, Solution: Official Fix, Exploit Maturity: Proof-of-Concept, CVSSv3.1: 9.3, CVEs: CVE-2026-72702, CVE-2026-72701, CVE-2026-72698, CVE-2026-72697, CVE-2026-72696, Summary: CVE-2026-72702 9.3 Grav CMS before 2.0.16 Origin Validation Bypass via Referer CVE-2026-72701 6.3 Grav CMS before 2.0.16 Timing Attack via verifyNonce CVE-2026-72698 7.1 Grav CMS before 2.0.16 Information Disclosure via Twig Sandbox Bypass CVE-2026-72697 7.1 Grav CMS before 2.0.16 Path Traversal via…
Grav FI
CVE v události 5
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-72696 | 8.6 4.0 · VulnCheck 8.4 3.1 · VulnCheck | – | 0.00 |
| CVE-2026-72697 | 7.1 4.0 · VulnCheck 6.5 3.1 · VulnCheck | – | 0.00 |
| CVE-2026-72698 | 7.1 4.0 · VulnCheck 6.5 3.1 · VulnCheck | – | 0.00 |
| CVE-2026-72701 | 6.3 4.0 · VulnCheck 3.7 3.1 · VulnCheck | – | 0.00 |
| CVE-2026-72702 | 9.3 4.0 · VulnCheck 5.4 3.1 · VulnCheck | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.3.