CVE-2026-72831Published
Grav through 2.0.11 Authentication Bypass via Flex Objects
Exact source revision recorded 29 Oct 2026 21:48:56 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-72831 · Microsoft / collected KEV context
cve-program · CVE-2026-72831
- https://github.com/getgrav/grav/security/advisories/GHSA-pc8m-jxvh-vmrc
- https://github.com/getgrav/grav/commit/ad9709f865b09b68798fb1ac375b484a8cc1d892
- https://github.com/trilbymedia/grav-plugin-flex-objects/commit/0b384f5b0e73b1ad9dd29c70185407895ea3b09f
- https://github.com/getgrav/grav-plugin-api/commit/8071c10bc3a4743a4b8cf003dfb1644d6680c2ea
- https://github.com/getgrav/grav-plugin-admin2/commit/a0bf26f7e5d7a98894b7cd2b8c5afe419b264e53
- https://www.vulncheck.com/advisories/grav-through-authentication-bypass-via-flex-objects
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.