CVE-2026-61454— Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__
Possible ATT&CK Techniques 1AI
T1592.001 · HardwareGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-61454
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript variable window.__GRAV_CONFIG__ in the Admin2 SPA bootstrap page at /grav/admin (and its subroutes). This object is returned in every unauthenticated response and discloses the server URL, API prefix, admin base path, runtime environment type, and exact Grav and Admin2 version numbers, allowing an unauthenticated attacker to fingerprint the deployment and select version-specific exploits without reconnaissance.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-61454
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-61454
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-61454 (1)
Other References for CVE-2026-61454 (1)
- 🔗 Page Not Found | VulnCheckthird-party-advisory
IV. Related Vulnerabilities
Same product: grav
- CVE-2026-59193
Grav CMS — Improper Handling of Highly Compressed Data in In - CVE-2026-59190
Grav Admin Plugin — IDOR Privilege Escalation via saveUser() - CVE-2026-58493
grav-plugin-database: DSN Parameter Injection via Unsanitize - CVE-2026-58492
grav-plugin-database: SQL Injection in PDO::tableExists() du - CVE-2026-55890
Grav: Stored CSS injection via Markdown image ?style=… reach
Same vendor: getgrav
- CVE-2026-59193
Grav CMS — Improper Handling of Highly Compressed Data in In - CVE-2026-59190
Grav Admin Plugin — IDOR Privilege Escalation via saveUser() - CVE-2026-58493
grav-plugin-database: DSN Parameter Injection via Unsanitize - CVE-2026-58492
grav-plugin-database: SQL Injection in PDO::tableExists() du - CVE-2026-55890
Grav: Stored CSS injection via Markdown image ?style=… reach
Same weakness: CWE-200
- CVE-2026-61426
PraisonAI before 1.7.3 Unauthenticated Agent Access via Inse - CVE-2026-56303
Capgo - Unauthenticated API Key Metadata Disclosure via SECU - CVE-2026-6801
Context Blog <= 1.3.5 - Unauthenticated Sensitive Informatio - CVE-2026-10865
Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitiv - CVE-2026-7544
Mux Video Uploader <= 1.1.4 - Authenticated (Subscriber+) In
V. Comments for CVE-2026-61454
No comments yet