CVE-2026-65608 | getgrav Grav up to 2.0.8 FlexDirectory dynamicDataField os command injection

July 23, 2026 Yanac

A vulnerability was found in getgrav Grav up to 2.0.8. It has been declared as critical. Affected by this issue is the function FlexDirectory::dynamicDataField of the component FlexDirectory. Executing a manipulation can lead to os command injection.

This vulnerability is registered as CVE-2026-65608. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More