CVE-2026-62232 | getgrav Grav up to 2.0.3 Login Plugin regenerate2FASecret 2FA secret cross-site request forgery

July 17, 2026 Yanac

A vulnerability was found in getgrav Grav up to 2.0.3. It has been rated as problematic. This impacts the function regenerate2FASecret of the component Login Plugin. This manipulation of the argument 2FA secret causes cross-site request forgery.

The identification of this vulnerability is CVE-2026-62232. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More