CVE-2025-50286 | Grav CMS 1.7.48 direct-install privilege escalation

August 6, 2025 Yanac

A vulnerability classified as critical has been found in Grav CMS 1.7.48. This affects an unknown part of the file /admin/tools/direct-install. The manipulation leads to privilege escalation.

This vulnerability is uniquely identified as CVE-2025-50286. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More