CVE-2026-75835 | getgrav Grav up to 1.0.13 Authorization Logic AbstractApiController.php userPassesAuthorize improper authorization

A vulnerability labeled as problematic has been found in getgrav Grav up to 1.0.13. Affected by this vulnerability is the function userPassesAuthorize of the file AbstractApiController.php of the component Authorization Logic. Executing a manipulation can lead to improper authorization.

The identification of this vulnerability is CVE-2026-75835. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More