CVE-2026-78851
MEDIUM NVDCVSS Score
6.5
Severity
MEDIUM
Source
NVD
Published
Oct 15, 2026
Description
Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.