sign in--:--:--UTC

CVE-2026-42608

exploited in the wild☆ pin

CVSS

—

Reports

2

First seen

Sep 25, 2026

Last seen

Sep 28, 2026

Affected product

Grav CMS 1.7.0 through 1.7.53.3

Associated actors

Clop ×2 ShinyHunters ×2 Konni ×1 Storm-2992 ×1 UNK_CondorFiltration ×1 Scattered Spider ×1 Kimsuky ×1

Recent reports

Weekly Security Recap: Citrix NetScaler Exploits, $387M Crypto Hack, Placeholder Domain Abuse

The Hacker NewsSep 28, 2026 High

ShinyHunters compromised Clop ransomware leak site via Grav CMS path traversal vulnerability

Bleeping ComputerSep 25, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans