Threats Tagged 'cve-2026-80203'
View all threats tagged with 'cve-2026-80203'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-80203'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-80203: Incorrect Authorization in getgrav gravCVE-2026-80203 0 The getgrav/grav-plugin-api plugin before 1.0.18 does not enforce API-key scope in the requireNotSuperTarget() function in UsersController.php across seven sensitive user-management endpoints. The check uses isSuperAdmin() on the acting account rather than verifying whether the specific API key carries super authority (via isSuperWithinScope()). As a result, an API key scoped below full super authority but belonging to a super-admin account can act against other super-admin accounts—disabling their 2FA, deleting their avatar, minting new API keys under their identity, or deleting their existing API keys. Join the discussion | CVE Database V5 | 08/26/2026, 10:28:12 UTC Added: 08/26/2026, 10:37:47 UTC |
Showing 1 to 1 of 1 result