| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-72838 | FileBrowser before 2.63.19 Disk Exhaustion via TUS Upload | filebrowser | filebrowser | Medium | 6.5 | 2026-08-14 11:35:43 | Deep Dive |
| CVE-2026-72837🧪 | File Browser before 2.63.20 Privilege Escalation via Proxy Authentication | filebrowser | filebrowser | High | 8.8 | 2026-08-14 11:35:42 | Deep Dive |
| CVE-2026-72836🧪 | FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass | filebrowser | filebrowser | High | 8.1 | 2026-08-14 11:35:41 | Deep Dive |
| CVE-2026-72835 | filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization | filebrowser | filebrowser | Medium | 6.8 | 2026-08-14 11:35:41 | Deep Dive |
| CVE-2026-72834 | filebrowser before 2.63.19 Permission Bypass via checksum | filebrowser | filebrowser | Medium | 4.3 | 2026-08-14 11:35:40 | Deep Dive |
| CVE-2026-72833🧪 | Grav 1.0.6 through 1.0.11 Privilege Escalation via Scoped API Keys | getgrav | grav | High | 8.8 | 2026-08-14 11:35:39 | Deep Dive |
| CVE-2026-72832 | Grav before 2.0.12 Stored XSS via quoted-attribute bypass | getgrav | grav | Medium | 5.4 | 2026-08-14 11:35:38 | Deep Dive |
| CVE-2026-72831🧪 | Grav through 2.0.11 Authentication Bypass via Flex Objects | getgrav | grav | High | 8.8 | 2026-08-14 11:35:38 | Deep Dive |
| CVE-2026-72830🧪 | Grav API Plugin before 1.0.13 RCE via ConfigController scope bypass | getgrav | grav | Critical | 9.8 | 2026-08-14 11:35:37 | Deep Dive |
| CVE-2026-72828🧪 | Grav before 1.0.13 API Key Scope Bypass via InvitationsController | getgrav | grav | High | 7.2 | 2026-08-14 11:35:36 | Deep Dive |
| CVE-2026-72829🧪 | Grav before 1.0.13 API Key Scope Bypass via UsersController | getgrav | grav | Critical | 9.8 | 2026-08-14 11:35:36 | Deep Dive |
| CVE-2026-72827🧪 | Grav CMS before 2.0.13 Remote Code Execution via Twig | getgrav | grav | High | 8.8 | 2026-08-14 11:35:35 | Deep Dive |
| CVE-2026-72826🧪 | Grav before 1.0.13 Scope Bypass via createApiKey | getgrav | grav | Critical | 9.8 | 2026-08-14 11:35:34 | Deep Dive |
| CVE-2026-72825🧪 | Grav before 1.0.13 API-key scope cap bypass via ReportsController | getgrav | grav | High | 7.6 | 2026-08-14 11:35:34 | Deep Dive |
| CVE-2026-72824🧪 | Grav before 1.0.13 API Key Scope Bypass via PagesController | getgrav | grav | Critical | 9.8 | 2026-08-14 11:35:33 | Deep Dive |
| CVE-2026-72822🧪 | Grav before 1.0.13 Authentication Bypass via disable2fa | getgrav | grav | Critical | 9.8 | 2026-08-14 11:35:32 | Deep Dive |
| CVE-2026-72823 | Grav before 1.0.13 API-key scope cap bypass via DemoController | getgrav | grav | Medium | 5.4 | 2026-08-14 11:35:32 | Deep Dive |
| CVE-2026-72821 | Grav Form Plugin before 9.1.15 Stored XSS via Radio Toggle | getgrav | grav | Medium | 5.4 | 2026-08-14 11:35:31 | Deep Dive |
| CVE-2026-72820 | Grav 2.0.11 Path Traversal via Backup Profile Configuration | getgrav | grav | Medium | 4.9 | 2026-08-14 11:35:30 | Deep Dive |
| CVE-2026-72819🧪 | Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload | getgrav | grav | High | 8.8 | 2026-08-14 11:35:30 | Deep Dive |