Skip to content

CVE-2024-28116

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 7, 2026
Last Seen
September 7, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Recent exploits targeting Grav CMS have emerged, leveraging the SSTI vulnerability (CVE-2024-28116). Two proof-of-concept scripts, GenGravSSTIExploit and Graver, allow attackers to inject remote code execution (RCE) payloads on vulnerable systems. These scripts require valid user credentials for aut...

Public Exploits

Checking GitHub for proof-of-concept code…