Skip to content

CVE-2026-72829

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
August 16, 2026
Last Seen
August 16, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in Grav Plugin Allow Privilege Escalation and RCE69.8

Two critical vulnerabilities (CVE-2026-72829 and CVE-2026-72824) were discovered in the Grav plugin API, published on 2026-08-14. CVE-2026-72829 allows privilege escalation using restricted API keys, enabling the creation of super-admin accounts. CVE-2026-72824 permits remote code execution (RCE) du...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Articles (1)

Related Entities

Zero-day ExploitCWE-269 - Improper Privilege ManagementT1068 - Exploitation for Privilege EscalationGrav