CVE-2026-62387 | getgrav Grav API Plugin up to 1.0.x CORS Configuration cross-domain policy (EUVD-2026-45087)

July 17, 2026 Yanac

A vulnerability described as problematic has been identified in getgrav Grav API Plugin up to 1.0.x. This vulnerability affects unknown code of the component CORS Configuration. The manipulation results in permissive cross-domain policy with untrusted domains.

This vulnerability is cataloged as CVE-2026-62387. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More