Skip to content
OpenAdvisories

Vendor

Trilby Media

4 known vulnerabilities.

Products

grav-plugin-flex-objects 1 Grav CMS scheduler-webhook plugin 1 grav-plugin-git-sync 1 grav-plugin-scheduler-webhook 1 getgrav/grav 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.6
    CVE-2026-57852

    Authentication Bypass via Null Short-Circuit in Grav CMS Scheduler Webhook Token Check

    Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that allows unauthenticated remote attackers to trigger configured scheduled jobs by exploiting a short-circuit logic flaw in the webhook token validation. Attackers can send a …

    Trilby Media Grav CMS scheduler-webhook plugin