{"vulnerability": "cve-2026-100671", "sightings": [{"uuid": "3c5cb309-6dba-4318-8bea-e6c02c2a0665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100671", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhq7zktlt2m", "content": "\ud83d\udfe0 CVE-2026-100671 - High (8)\n\nGrav is a flat-file CMS. In versions 2.0.19 through 2.0.24 \u2014 and in 2.0.0 through 2.0.18 and 1....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100671/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:17:11.594478Z"}, {"uuid": "b2ebfd42-829e-4c30-ba6b-919d19e7deea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100671", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwi2h4dfml26", "content": "CVE-2026-100671 - grav\nPages edited by a low\u2011privilege user can capture the browser cookie that identifies an administrator\u2019s login. The cookie is saved in the site\u2019s cache and later shown to anyone who views\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-09-27T05:20:06.076360Z"}, {"uuid": "9a030697-4f83-4a3d-9f83-dcecabb213ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100671", "type": "seen", "source": "https://t.me/GithubRedTeam/103975", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-100671-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a canhieu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 15:27:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-01T16:00:08.000000Z"}, {"uuid": "09fed571-5250-41e4-85ed-2ed0491d2da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100671", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103975", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-100671-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a canhieu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 15:27:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-01T16:00:08.000000Z"}, {"uuid": "7c00bd73-d5c2-4ce5-b8db-0670cb7a8db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100671", "type": "seen", "source": "Telegram/ya3biyS78NZBY4HsvXm__1WIMQVJB3Xs6kCcTY0Y0CX8Qfw", "content": "", "creation_timestamp": "2026-10-01T19:00:15.000000Z"}, {"uuid": "f6352b34-6ce1-475b-92d3-ba066180d3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100671", "type": "published-proof-of-concept", "source": "Telegram/ya3biyS78NZBY4HsvXm__1WIMQVJB3Xs6kCcTY0Y0CX8Qfw", "content": "", "creation_timestamp": "2026-10-01T19:00:15.000000Z"}]}