CVE-2026-80203 | getgrav API Plugin up to 1.0.17 UsersController.php requireNotSuperTarget privileges management

August 26, 2026 Yanac

A vulnerability marked as critical has been reported in getgrav API Plugin up to 1.0.17. This affects the function requireNotSuperTarget of the file UsersController.php. This manipulation causes improper privilege management.

The identification of this vulnerability is CVE-2026-80203. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More