CVE-2026-62232— Grav < 2.0.4 2FA Bypass via Secret Regeneration
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-62232
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Grav < 2.0.4 2FA Bypass via Secret Regeneration
Source: NVD (National Vulnerability Database)
Vulnerability Description
Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FASecret task checks only user existence, not authorization, during the pending TOTP challenge window. Attackers who know the victim's password can call this task without a CSRF nonce to overwrite the 2FA secret with an attacker-chosen value, compute a valid TOTP code, and complete authentication while reducing 2FA to password-only protection.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制缺失
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-62232
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
Qwen3.6-35B-A3B · 8571 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-62232
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-62232 (2)
- 🔗 Grav < 2.0.4 2FA Bypass via Secret Regeneration | Advisories | VulnCheckthird-party-advisory
Same Patch Batch · getgrav · 2026-07-17 · 10 CVEs total
| CVE-2026-62233 | 8.8 HIGH | grav-plugin-api < 1.0.6 Privilege Escalation via createApiKey |
| CVE-2026-62234 | 8.1 HIGH | Grav < 2.0.4 SSRF via Unrestricted cURL Protocols |
| CVE-2026-62231 | 8.1 HIGH | Grav < 1.0.6 API Key Scope Bypass via ApiKeyAuthenticator |
| CVE-2026-62386 | 7.5 HIGH | Grav < 1.0.0-rc.16 Authentication Bypass via token URL Parameter |
| CVE-2026-62230 | 7.5 HIGH | Grav < 2.0.4 File Access Bypass via Case Variation |
| CVE-2026-62387 | 7.1 HIGH | Grav < 1.0.0-rc.16 CORS Misconfiguration via API Plugin |
| CVE-2026-62237 | 6.5 MEDIUM | Grav < 2.0.4 ReDoS via regex_replace in Sandbox |
| CVE-2026-62235 | 6.3 MEDIUM | Grav Flex-Objects < 1.4.3 Authorization Bypass via API |
| CVE-2026-62236 | 5.4 MEDIUM | grav-plugin-login < 3.8.11 CSRF via regenerate2FASecret |
IV. Related Vulnerabilities
Same product: grav
- CVE-2026-62386
Grav < 1.0.0-rc.16 Authentication Bypass via token URL Param - CVE-2026-62387
Grav < 1.0.0-rc.16 CORS Misconfiguration via API Plugin - CVE-2026-62237
Grav < 2.0.4 ReDoS via regex_replace in Sandbox - CVE-2026-62236
grav-plugin-login < 3.8.11 CSRF via regenerate2FASecret - CVE-2026-62234
Grav < 2.0.4 SSRF via Unrestricted cURL Protocols
Same vendor: getgrav
- CVE-2026-62387
Grav < 1.0.0-rc.16 CORS Misconfiguration via API Plugin - CVE-2026-62386
Grav < 1.0.0-rc.16 Authentication Bypass via token URL Param - CVE-2026-62237
Grav < 2.0.4 ReDoS via regex_replace in Sandbox - CVE-2026-62236
grav-plugin-login < 3.8.11 CSRF via regenerate2FASecret - CVE-2026-62234
Grav < 2.0.4 SSRF via Unrestricted cURL Protocols
Same weakness: CWE-862
- CVE-2026-62235
Grav Flex-Objects < 1.4.3 Authorization Bypass via API - CVE-2026-62218
OpenClaw 2026.1.20 < 2026.5.27 Authorization Bypass via devi - CVE-2026-62206
OpenClaw < 2026.6.9 Authentication Bypass via Moderation Act - CVE-2026-62207
OpenClaw < 2026.6.5 Authentication Bypass via Admin Tools - CVE-2026-62205
OpenClaw 2026.4.12-beta.1 < 2026.6.6 Authorization Bypass vi
V. Comments for CVE-2026-62232
No comments yet