Skip to content
OpenAdvisories

Vendor

Grav

7 known vulnerabilities.

Products

Grav 5 CMS 1 grav-plugin-api 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-56700

    Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection

    Grav CMS before 2.0.0-beta.2 contains multiple code-execution vulnerabilities. Three unsafe unserialize() calls - in Scheduler\JobQueue, Framework\Cache\Adapter\FileCache, and Session - deserialize untrusted data without restricting allowed classes, enabling …

    Grav Grav getgrav/grav Packagist