Skip to content
Threat Feed
Subscribe

Tag

Security-Misconfiguration

6 briefs RSS
high threat

Grav CMS Session Hijacking via Twig Sandbox Injection

Grav CMS versions 1.7.x and 2.0.0 through 2.0.24 are vulnerable to session hijacking due to an improperly restricted get_cookie() function within the Twig rendering engine.

exploited PoC Grav +2 web-application security-misconfiguration cve-2026-100669
3t 2c updated
critical advisory

Security Misconfiguration in IBM Financial Transaction Manager for RedHat OpenShift

IBM Financial Transaction Manager for RedHat OpenShift is vulnerable to an improper configuration of HTTP method-based security constraints, allowing remote unauthenticated attackers to bypass access controls.

Financial Transaction Manager for RedHat OpenShift +2 web-vulnerability security-misconfiguration financial-services cve-2026-17635 cross-site-scripting cve-2026-18872 ai-security rag-poisoning +1
3t 1c updated
high advisory

Perses Filesystem Path Traversal Vulnerability

The Perses project, when configured with a filesystem database, fails to validate the project parameter in list requests, enabling unauthorized directory traversal and arbitrary file read access.

Perses +2 web-vulnerability path-traversal security-misconfiguration authorization-bypass cve-2026-63458
1r 2t 1c updated
high advisory

Grav Privilege Escalation via Group Blueprint ACL Bypass

A missing 'security@' guard in Grav's group blueprint allows an 'admin.users' operator to escalate privileges to 'admin.super' by modifying group access configurations.

Grav +2 privilege-escalation cms vulnerability web-application-vulnerability path-traversal cve-2026-74907 twig security-misconfiguration
1r 3t 1c
high advisory

Grav CMS Twig Sandbox Bypass via Configuration Exposure

CVE-2026-92917 allows an authenticated user with page-edit privileges in Grav CMS 2.0.0-rc.1 through 2.0.21 to bypass Twig sandboxing and exfiltrate the full application configuration, including API keys and credentials.

Grav +1 cms web-application security-misconfiguration information-disclosure
3t 1c updated
critical advisory

SSRF Vulnerability in SiYuan via DNS Rebinding

SiYuan versions prior to 3.8.1 are vulnerable to server-side request forgery through a DNS rebinding attack, enabling unauthorized access to cloud metadata services and internal network resources.

SiYuan +5 ssrf vulnerability cloud-security web-vulnerability xss information-disclosure credential-access cve-2026-85174 +8
2r 6t 1c updated