CVE-2026-65603 | getgrav Login Plugin up to 3.8.11 Authenticated Profile Self-Update processUserProfile groups/access privileges management

July 22, 2026 Yanac

A vulnerability, which was classified as critical, was found in getgrav Login Plugin up to 3.8.11. The affected element is the function processUserProfile of the component Authenticated Profile Self-Update Handler. Executing a manipulation of the argument groups/access can lead to improper privilege management.

This vulnerability is registered as CVE-2026-65603. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More