CVE-2026-109321 | getgrav Login OAuth up to 1.4.2 OAuth Account Provisioning hash predictable salt

October 12, 2026 Yanac

A vulnerability described as critical has been identified in getgrav Login OAuth up to 1.4.2. Affected by this vulnerability is an unknown functionality of the component OAuth Account Provisioning. Executing a manipulation can lead to use of a one-way hash with a predictable salt.

This vulnerability is tracked as CVE-2026-109321. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More