CVE-2026-74907 | Getgrav Grav up to 2.0.14 Static Asset Server index.php path traversal

August 18, 2026 Yanac

A vulnerability identified as problematic has been detected in Getgrav Grav up to 2.0.14. Affected is an unknown function of the file index.php of the component Static Asset Server. Performing a manipulation results in path traversal.

This vulnerability was named CVE-2026-74907. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More