What is the CVSS score of CVE-2026-61842?

CVE-2026-61842 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.3%.

Is there a public PoC exploit available for CVE-2026-61842?

Yes, a public proof-of-concept exploit is available for CVE-2026-61842. Prioritise patching immediately. EPSS: 0.3%.

Is there a patch available for CVE-2026-61842?

Yes, a patch is available for CVE-2026-61842. Update the affected software to the latest version immediately.

Grav CMS CVE-2026-61842

EUVD-2026-62535 MEDIUM

Information Exposure (CWE-200)

2026-08-19 GitHub_M

GHSA-mc5q-6hpj-rp7j

Information Disclosure Grav Getgrav

6.5

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

6.5 MEDIUM

Network-reachable attack requiring only a page-author session (PR:L); no integrity or availability impact; full confidentiality loss of plugin credential secrets justifies C:H.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Aug 19, 2026 - 16:17 EUVD

Source Code Evidence Fetched

Aug 19, 2026 - 16:08 vuln.today

Analysis Generated

Aug 19, 2026 - 16:08 vuln.today

DescriptionCVE.org

Grav is a file-based Web platform. Prior to 2.0.2, the Grav Twig content sandbox permits grav.offsetGet('config') to return the raw configuration object and permits json_encode, print_r, yaml_encode, and string filters to serialize that object without passing through GravSecurityPolicy::checkMethodAllowed. A user with page-author permissions can render sandboxed content that exposes plugins.* configuration secrets, including SMTP credentials, API keys, and plugin database credentials. This issue is fixed in version 2.0.2.

AnalysisAI

Configuration secret exposure in Grav (all versions prior to 2.0.2) allows authenticated page authors to exfiltrate sensitive plugin credentials - including SMTP passwords, API keys, and plugin database credentials - through a Twig sandbox bypass. The Grav container's offsetGet and __get methods were allow-listed, enabling page-authored Twig to obtain the raw Config object, while serialization filters (json_encode, print_r, yaml_encode, string) were not routed through GravSecurityPolicy::checkMethodAllowed, so the sandbox's member-access gate was never triggered. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated Grav user account with page-author permissions - a role that must be explicitly granted by an administrator and is not present by default on a fresh Grav installation with a single admin owner. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N scores 6.5, consistent with the description: the attack is network-reachable with no complexity barrier once an authenticated page-author account is held, with full confidentiality impact limited to data within the application. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Upgrade Grav to version 2.0.2 or later; this is the vendor-released patch confirmed by the GitHub release at https://github.com/getgrav/grav/releases/tag/2.0.2 and the commit at https://github.com/getgrav/grav/commit/7efe70574e4cf01a251318478c13673029e93eb6. … Detailed patch versions, workarounds, and compensating controls in full report.