Frequency
1
occurrences
First Seen
September 4, 2026
Last Seen
September 4, 2026
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—
Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Grav versions before 2.0.19, specifically 2.0.17 and earlier, are vulnerable to a remote code execution flaw in the Twig sort filter. The vulnerability arises from the sortFunc wrapper in GravExtension.php, which hardcodes the isSandboxed argument to false, allowing an attacker to invoke spl_autoloa...
Public Exploits
Checking GitHub for proof-of-concept code…