{"uuid": "85bfaa45-0e9b-4c6c-a0f6-8f8cad681326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72829", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117094103522465305", "content": "CVE-2026-72829 (CRITICAL): getgrav grav API plugin &lt;1.0.13 allows api.users.write-scoped keys from super accounts to escalate to full admin. Restrict API key use &amp; monitor for privilege changes. Details: https://radar.offseq.com/threat/cve-2026-72829-improper-privilege-management-in-getgrav-grav-8d7c1bb7ce40a2ba #OffSeq #CVE202672829 #infosec #WebAppSec", "creation_timestamp": "2026-08-14T13:30:26.809655Z"}