CVE-2026-59190 | getgrav Grav up to 1.10.52 User Management /admin/user saveUser Password improper authorization

July 10, 2026 Yanac

A vulnerability labeled as problematic has been found in getgrav Grav up to 1.10.52. This impacts the function saveUser of the file /admin/user of the component User Management. The manipulation of the argument Password results in improper authorization.

This vulnerability is reported as CVE-2026-59190. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More