CVE-2026-114659 | getgrav grav-plugin-flex-objects up to 1.4.16 Pages API pages authorization

October 22, 2026 Yanac

A vulnerability classified as problematic has been found in getgrav grav-plugin-flex-objects up to 1.4.16. The affected element is an unknown function of the file /api/v1/flex-objects/pages of the component Pages API. The manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-114659. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More