NVD CRITICAL: CVE-2026-75837 — Grav before 2.0.14 fails to guard the access field in the core group blueprint w...

Tuesday, August 18, 2026 at 12:19 PM UTC·Source: NIST NVD

Updated: Tuesday, August 18, 2026 at 01:00 PM UTC

Executive Summary

Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@: admin.super restriction. A delegated admin.users operator can save a group with access[admin][super]=true to escalate to super-admin, gaining scheduler and Twig evaluation capabilities.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-75837

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Aug 18, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

FDA Weighing Possible Regs for GenAI Medical Devices

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/fda-weighing-possible-regs-for-generative-ai-medical-devices-image_small-6-a-32593.jpg" align=right hspace=4>Agency Seeks Public Input on Risk-Based Oversight Approach Across Product Life Cycle The U.S. Food and Drug Administration is seeking public feedback on the varying risks and other considerations involving generat

1h agoBank Info Security

MEDIUMVulnerability

When AI Risk Becomes a Board Liability

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/when-ai-risk-becomes-board-liability-image_small-9-a-32594.jpg" align=right hspace=4>CIOs Can Strengthen Oversight Through Reporting, Records and Insurance Reviews AI failures can trigger financial, regulatory and reputational exposure that reaches the boardroom. Reed Smith partners Carolyn Rosenberg and Andy Moss explai

1h agoBank Info Security

CRITICALVulnerability

Critical GitLab Zero-Click Flaw Poses Mitigation Challenges

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.

CVE-2026-19478

2h agoDark Reading