CVE-2026-42608

Reported Context (2)

an unpatched Grav CMS flaw that’s now assessed to be an unauthenticated path traversal vulnerability (CVE-2026-42608). Weekly Cybersecurity Roundup: Suspected $387M Bitget Hack, Exploited Citrix Flaws and More
Grav confirmed the issue as CVE-2026-42608 and released a fix for the older 1.7 branch in version 1.7.53.4. ShinyHunters Defaced Clop Leak Site Through Grav CMS Path Traversal Flaw

CVE (3)

Malware (6)

People (5)

Threat Actors (5)

Vendors (8)

Products (6)

Tools (6)

Industries (2)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.