CVE-2026-80204 | Grav API Plugin up to 1.0.17 BlueprintController injectSecurityTab privileges management

August 26, 2026 Yanac

A vulnerability, which was classified as critical, was found in Grav API Plugin up to 1.0.17. The impacted element is the function injectSecurityTab of the component BlueprintController. The manipulation results in improper privilege management.

This vulnerability is cataloged as CVE-2026-80204. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More