Trilby Media
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| getgrav/grav | 1 | – | Aug 7, 2026 |
| Grav CMS scheduler-webhook plugin | 1 | – | Jul 20, 2026 |
| grav-plugin-scheduler-webhook | 1 | – | Aug 7, 2026 |
Exploited and recent CVEs
- CVE-2026-11430 Grav CMS Scheduler Webhook Authentication Bypass via Null Short-Circuit 1.0%
- CVE-2026-11430 Grav CMS Scheduler Webhook Authentication Bypass via Null Short-Circuit 1.0%
- CVE-2026-57852 Authentication Bypass via Null Short-Circuit in Grav CMS Scheduler Webhook Token Check 0.7%