CVE-2026-72823 | getgrav Grav up to 1.0.12 Grav API /api/v1/demo/reset requireSuper permission

August 14, 2026 Yanac

A vulnerability marked as problematic has been reported in getgrav Grav up to 1.0.12. Affected by this issue is the function requireSuper of the file /api/v1/demo/reset of the component Grav API. This manipulation causes permission issues.

This vulnerability is registered as CVE-2026-72823. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More