CVE-2026-78851

Published 15 October 2026 · tracked since 16 October 2026

Description

Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-111138 MEDIUM 5.5
• CVE-2026-110874 MEDIUM 6.6
• CVE-2026-110878 MEDIUM 5.4
• CVE-2026-109924 MEDIUM 5.9
• CVE-2026-109932 MEDIUM 5.9
• CVE-2026-109829 HIGH 7.4
• CVE-2026-109841 MEDIUM 5.9
• CVE-2026-109869 HIGH 7.5
• CVE-2026-109383 HIGH 7.4
• CVE-2026-104150

→ Open the live CVE board · all tools