What is CVE-2026-75836?
CVE-2026-75836 is an authorization bypass vulnerability in the Grav API plugin where MenubarController::executeAction() fails to enforce necessary permission checks. Unauthorized users may execute actions via POST requests. Update the Grav API plugin to version 1.0.14 to address this issue.
Azərbaycanca: CVE-2026-75836 Grav API plaginində avtorizasiya yoxlamasının düzgün yerinə yetirilməməsi boşluğudur. Bu boşluq POST əməliyyatı vasitəsilə yetkisiz əmrlərin icrasına şərait yarada bilər. Grav API plugin-ini 1.0.14 versiyasına yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-862
FAQ2
What security weakness does CVE-2026-75836 cause in the Grav API plugin?
This vulnerability allows unauthorized users to execute actions via POST requests due to a failure to enforce necessary permission checks in the MenubarController::executeAction() function.
How can I protect against CVE-2026-75836?
It is recommended to update the Grav API plugin to version 1.0.14.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.