CVE-2026-62386 | getgrav Grav 1.0.0-beta.15/1.0.0-beta.17 Grav API extractBearerToken token improper authorization

July 17, 2026 Yanac

A vulnerability identified as critical has been detected in getgrav Grav 1.0.0-beta.15/1.0.0-beta.17. Affected by this vulnerability is the function extractBearerToken of the component Grav API. Performing a manipulation of the argument token results in improper authorization.

This vulnerability is identified as CVE-2026-62386. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More