Grav CMS

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 1, 2026
Last mentionedOct 4, 2026

Timeline

3 articles · newest first

ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members

Jordan detained ShinyHunters suspect Rey, who is reportedly helping the FBI identify other members.

The Hacker NewsOct 4, 07:22 UTC · Oct 4, 2026Policy & legal4 · 2 reads

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

ShinyHunters defaced Clop's leak site via unpatched Grav CMS path traversal CVE-2026-42608; Grav patched the 1.7 branch.

BleepingComputerSep 25, 20:57 UTC · Sep 25, 2026Exploit / PoCExploitedCVE-2026-4260812 · 5 reads

[webapps] Grav CMS 2.0.7 - RCE

A proof-of-concept exploit for remote code execution in Grav CMS 2.0.7 has been published on Exploit-DB.

Exploit-DBSep 1, 00:00 UTC · Sep 1, 2026Exploit / PoC

Related CVEs

by mentions

CVE-2026-42608<1%8.8
Grav: There is a Path Traversal vulnerability within the FormFlash core component. By manipulating the session_id (passed as…
published May 11, 2026getgrav gravPoC

Appears with

ShinyHuntersthreat actor · 2
Gravvendor · 2
Clopvictim · 1
Grav CMSvendor · 1
Scattered Spiderthreat actor · 1
FBIorganization · 1
TheDarkOverlordthreat actor · 1
Clopthreat actor · 1
Neo Securityorganization · 1
Hellcatthreat actor · 1
The Comthreat actor · 1
Beazley Securityorganization · 1
Sekoiaorganization · 1
Scattered LAPSUS$ Huntersthreat actor · 1
Cl0pthreat actor · 1
FBIvictim · 1

Entities are extracted by the model from each article. First seen Sep 1, 2026, last mentioned Oct 4, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.