Threats Tagged 'cve-2026-61450'
View all threats tagged with 'cve-2026-61450'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-61450'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-61450: Improper Control of Generation of Code ('Code Injection') in getgrav gravCVE-2026-61450 0 Grav CMS versions before 2.0.2 have a vulnerability in the Twig sandbox that allows users with page authoring permissions to bypass sandbox restrictions and access sensitive configuration data. This occurs because the real configuration object can be accessed via an allow-listed method, and object-dumping filters serialize the full configuration including secrets like SMTP credentials and API keys. The vulnerability is a code injection type related to improper control of code generation. Join the discussion | CVE Database V5 | 07/10/2026, 13:58:08 UTC Added: 07/10/2026, 14:48:13 UTC |
Showing 1 to 1 of 1 result